Related to Paloalto VM instance type change

Dear Team,

I have a question while testing.

If I'm wrong, anyone please feel free to leave a comment.

1. Check if an issue occurs in the service traffic processing part when changing the instance type
> Since there is no change in the settings,

What are the limitations of Expedition Migration tool when migrating other vendors firewalls

Hi,

Can any one name the technical limitations of using Expedition tool for migrating to PAN.

Thanks and regards. 

WSL and SSL decryption

Hi guys. We have a number of developers that use Windows Subsystem for Linux (WSL) on their Windows clients, and there are a lot of URLs and services that will not work when we decrypt the traffic. Managing a decryption exclude list for them would be

PA-5250 Migration to Virtual Appliance and EoL Status

Hello

I'm interested in the Palo Alto virtual or VM-series appliance that would be broadly equivalent to the PA-5250. I realise the product selection is best made based on requirements such as sessions security rules, dynamic ip addresses, security

DNS proxy errors

We are using PANOS 9.1 and latest DNS security. Any thoughts on these errors from proxy log? 172.16.1.1 and 172.16.1.3 are Microsoft AD DNS servers.Can these be effecting performance of traffic?

2020-02-17 08:30:23.583 +1100 Error:  pan_dnsproxy_recv

IPSEC tunnel not working post HA failover

Hello Friends,

We have Palo Alto firewalls (various models like 3050, 5220 and 3220) which are in HA (active-passive mode).  IPSEC tunnels are working fine when traffic is on active gateway. The issue is, when we failover traffic on passive gateway,

HA Interfaces failover triggers

Hi All,

We currently have a pair of PA-5250 firewalls configured in active/passive. We have 4 port channel groups configured with the condition set to 'all'.

The question i have is we are using eth1/1 & eth1/2 as HA interfaces if one of these goe

User ID agent showing access denied after microsoft update on the DC

User ID agent showing access denied after microsoft update on the DC and I nothing I have tried has fixed it

SNMP manager for Palo Alto NGFW

Hello,

We are trying to use Cisco Prime as an SNMP manager for polling/snmp traps for our Palo FWs but according to Cisco, they only support Cisco MIBS. I was wondering if anyone could recommend an SNMP manager tool for Palos that we can use for po

getting PA-200 updated with latest updates

We have purchased Threat Prevention subscription for our older PA-200. I asked for both Premium Support and Threat Prevention but we were sold only Threat Prevention because supposedly PA-200 is no longer sold by PAN. But I cant seem to be able to pr