General Topics

Resolved! Basic Question about DNS Query

Scenario : In an organization, a client machine doesn't know IP address of example.com. So it sends DNS query to its local DNS server. Even the local DNS server doesn't know about example.com. Hence, the local DNS server sends DNS query to DNS forwarder. DNS forwarder too doesn't have information about example.com. However , DNS forwarder is ...

Unable to upload image to RMA box

OS 9.1.13 Model - PA 3020 Kindly refer to the attached actual error. I am unable to upload the OS file. I followed the below URL with no success. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNbICAW Every after SFTP gives an error - "FTP SFTP error". Kindly suggest how to deal with this.

Viber Uploading

We can only send text Viber messages. voice calls, video calls while sharing of photos/media won't go thru. Please help.

Resolved! How do I renew support for my PA-220?

How do I renew support for my PA-220? When I try to log into https://support.paloaltonetworks.com/, I get UnAuthorized Access, and Your membership has expired or has not been approved, please contact Palo Alto Networks Support. I tried calling a support number, provided my serial number, but was told I'm ineligible for support through that c...

Adding/deleting a route from a redistribution profile causes application drop

I have an issue where I have a redistribution profile configured. We'll call it Redist_Profile_A and in there I have static routes that I'm advertising into BGP. I create the static route, add it to the redistribution profile Redist_Profile_A, to my export route-map and when I go to commit the rule my application for Vendor B bounces. I never...

How to view correlated logs on the FW

Hello, I currently have an environment with TP, GP, ADVURL and WF and sometimes I need to see the full info of a user instead of going to traffic and check some portion then go to URL filtering and find something "maybe" related and so on. I keep getting results of using ACC but even there it is split in tabs, so I can check traffic but then...

Does Palo Alto have a PCNSE placement program?

I am a MSSP in the Boston area and I have a job opening for a PCNSE in the city. My job postings haven't netted much activity so I thought I'd go this route. Looking to see if PAN has some sort of networking hub, referral or placement program that might connect me with some candidates.Thanks!AB

Resolved! Best upgrade path 4.1.7-h2 to 6.0.12

Hi, Which would be the best upgrade path from 4.1.7-h2 to 6.0.12. Steps: 1) download and install 5.0.0 2)download 6.0.0 not install, download 6.0.12 and install directly. correct, right?? anything to keep in mind in this upgrade????

VPN Tunnel from remote ASA: only one of three proxy-IDs working

Has anyone had an issue where a tunnel is configured with multiple proxy-id's for a policy-based peer, but a working security association is formed for only one of them? I have a number of ASA 5505s that need to connect to my new Palo Altos from remote locations, where they mostly get dynamic, NATed, non-routable IPs. After more faffing about th...

PAN-193452 (PaloAlto 220 exceeds disk usage capacity) - Is this fixed in 10.2.3 ?

We have PA220 firewalls and regularly get the disk usage capacity error. With the help of the support team and KB instructions we can clear down space, but the message starts appearing a few days later. This is listed as a known issue (PAN-193452). Does anyone know if this is fixed in the latest release (10.2.3) and whether we are good to go a...