General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

Resolved! Is Installing Application and threats from file possible without a license for PA-820?

Hi Community,

I have a spare firewall PA-820 that I need to upgrade from 10.1.6-h3 to 10.2.0 but it returns an error asking me to update the content version. Please see picture below:

But when I try to upload the content version, it asks me for a l

...

SNMP manager for Palo Alto NGFW

Hello,

We are trying to use Cisco Prime as an SNMP manager for polling/snmp traps for our Palo FWs but according to Cisco, they only support Cisco MIBS. I was wondering if anyone could recommend an SNMP manager tool for Palos that we can use for po

...

getting PA-200 updated with latest updates

We have purchased Threat Prevention subscription for our older PA-200. I asked for both Premium Support and Threat Prevention but we were sold only Threat Prevention because supposedly PA-200 is no longer sold by PAN. But I cant seem to be able to pr

...

how dose firewll to panorama log forwording?

Hello.

I followed the video while watching it, and I want to send the log to the panorama server.

https://www.youtube.com/watch?v=B_ttlugnARE

The log is not being checked.

Is there a different setting to check the firewall log on the panorama s

...

firewall to panorama registration help

Hello. Sir.

registering a firewall on the panorama server.

The firewall administrator IP is set to default.

In this case, how do I register the firewall on the panorama server?

Resolved! Anti-Virus section is not visible on PA-TAC Team

Hi Team,

We have 3 PA-410 installed with PAN-OS 10.1.3. We have Advanced threat prevention license installed on the firewall and we are not able to see the Anti-virus update on the firewall .

The firewall is able to communicate with the Update serve

...

How Registration firewall to panorama?

Hello Guys.

To register the Paloalto firewall in the panorama, I watched the video and copied it, but it failed.

https://www.youtube.com/watch?v=UvtRuYE66DY

I tried it the other way, but it failed the same way.

https://docs.paloaltonetworks.com/

...

Resolved! Change VR name

Hello,

I have a 5250 with 3 Virtual Routers that talk with each other and one L3 switch via BGP.

I have to change the name of one of the VRs, this activity generate outage on the BGP and/or the active sessions managed by the VR?
I found these info:
"Wh

...

Watch SASE Converge 2022 On-Demand Now

Did you miss Palo Alto Networks' SASE Converge 2022 conference? It's not too late to hear from Palo Alto Networks leadership and industry experts talk about the latest trends and innovations in SASE: Watch SASE Converge 2022 on demand now!

Screen Shot 2022-09-20 at 1.04.53 PM.png

Resolved! Unable to resolve FQDN after upgrading PAN OS to 10.1.5 - " ping: unknown host FQDN"

Hi Every one,

We have recently upgraded PA-820 to PA-OS 10.1.5. After that, we observed we cannot resolve any FQDN from the firewall.

*. We have verified the DNS setting Device>Setup>Services> Primary as 8.8.8.8 and local.

*. We have tested by chang

...

Resolved! EDL and Auto Commit Fail

So the EDL ballooned at some point and was not checked beyond capacity of 220 PAs.

Upgrade attempted from 9.1 to 10.1

When upgraded to 10.0 autocomit won't complete and give large EDL error.

Firewall doesn't seem to make connection attempts to EDL

...

Resolved! forward trust certificate

Hi, i have a requirement to do ssl inspection from traffic from 2 different security domains, i have imported CA and issuing certs from the different DC's etc, i have then created new 2 certs for the to be used as the forward trust certs, but when i

...

Resolved! Issue that specific policy traffic logs fail to forward to syslog server and drop from firewall

Hello,

OS : 9.1.6

Currently, my customer is facing Issues where logs generated (TO_DNS policy) from a specific policy of more than 10,000 LPS are dropped without being forwarded to the syslog server.

The Traffic Log of the firewall is verifiable, but

...

스크린샷 2022-09-20 오전 11.52.58.png

IPSEC vsys cli

Hi

I configure IPsec tunnel.
When I configure with manual on web interface, by default was adding vsys to Tunnel Interface--Virtual system.
But when i configure with cli doesn't visible vsys(it visibles empty).

which command i can used for adding vsys?

Upgrade Clarification from Documentation

I found a post on the forum that went inactive about a month ago stating if you are upgrading from 8.1. to 9.1 you should

1. Download 9.0.0

2. Install the Preferred 9.0.X release

3. Download 9.1.0

4. Install the Preferred 9.1.X release

The docume

...

Discussions