how i can Check if my Internet is being utilized to its full potential or it is not being utilized upto its full potential.
Hi Team, I would like to seek for some advise. Panorama is not successful in committing in one of the managed firewalls. I already checked the "Share Unused Address and Service Objects with Devices" and set the timeout to 240 but issue is still existing. I kept digging here in Livecommunity and KnowledgeBase articles but no luck. Regard...
I please need help with our NGFW Credit Pool which simply disappeared in the portal.
Hi All, so 'premium support' vs 'premium partner support / backline' licenses on FWs. premium support - client has direct PAN support. premium partner support - client works through an ASC ie a managed services / 3rd party to PAN support (generally cheaper option). Scenario: so 'ClientA' bought their PA FW devices through 'CompanyB' who a...
HI Team, We did a push from Panorama for a HA pair, it succeeded on the Passive member, but Commit Timed Out on the Active member. However, when looking at the firewall we do see that the commit was Succeeded looking in Monitor>Logs>Configuration, and it is in sync with the configuration pushed on the Passive. And the push was completed a...
Hello everyone, I got a PA-3410, it's up and running for a while as an internet gateway to a local network. It's configured with static ip4 addresses, source NAT, security zones, default route etc, everythings working good. Recently I remotely configured an additional ethernet port (L3) but I'm not able to ping an internet destination with i...
got an issue where 2 of the 4 gateways work with OCSP after upgrading to 10.1.10-h2 do we need to go to 10.2? or 11. so we have 2 on 10.0.8 and 2 on 10.1.10-h2 working with OCSP 2 on older version, we had to downgrade to get it to work. 2 old version were build from 2017/2018 azure VM where as the 2 working on 10.1.10-hs are from a 2...
Hi Support we try to add new interface on AWS VPC for palo alto firewall. we using this kb as guide: https://docs.paloaltonetworks.com/vm-series/10-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/vm-series-integration-with-gateway-load-balancer/integrate-the-vm-series-with-an-aws-gateway-load-balancer/associate-a-vpc-endpoint-w...
I'm trying to make API calls. Using XML pathing it works fine. '/api/?type=config&action=get&xpath=/config/devices/entry[@name="localhost.localdomain"]/vsys/entry[@name="vsys1"]/rulebase/security/rules' So actually I had 2 questions. Is there a difference in functionality between the rest api calls and the xml pathing api calls? I'm a...
Hi Some back ground - been a long time since i delved into ipsec + proxyid. back in the linux days with strongswan and openswan and there was issues with nat and ipsec. My understanding back then was you had a interface say eth0 and when you applied a IPSEC tunnel (so ESP not AH) the proxyid were used to identify what was encapsulated into t...
Hi I have need to connect to a new site - they have over lapping IP address ranges. I have agreed to re number - all good. want to setup a IPSEC tunnel and I would like to SNAT all traffic from this new site so lets that I am using 192.168.10-20.0/24 and the space is 192.168.240-250.0/24 So its going to take a while to get it all renumbered ...
how i can Check if my Internet is being utilized to its full potential or it is not being utilized upto its full potential.
I'm facing issue when accessing NBA picks website which is hosted on cloud. I have created object of website and called in policy . this issue occurs when i have called object in destination and I m trying to access website . if i have access this website as destination put any then it will accessible.
Hi Team, I have a PA-850 in HA , recently we have upgrade the PAN-OS firewall from 10.1.10 to 10.1.11 and managed by Panorama. and then we check and found out the SDWAN policy is not working anymore. Before upgrade it's working fine. i have upload the primary non working of the SD wan Policy. There's no error message in GUI i tried to shut...
Hello, my name is Andrew. I am a student with UCR that needs to use GlobalProtect to sign into my University's VPN to use their academic website resources (library databases, etc.). I am reaching out to you guys because it takes me to the PaloAlto website sign-in portal every time I click on the MacOS directions to use the UCR "off-campus" link ...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
