Issue with routing possibly?

Needing a little help. I have a PA 5220 within a secure enclave (so no connection to the internet). I can ping a gateway in another enclave without any issue but when I ping the network beyond that gateway I get no reply. My GW external interface and their GW external interface are on the same subnet and their internal network and my internal ne...

Failed to delete certificate - Invalid Location / Permission Denied

Hardware: PA220 Version: 10.1.5-h1 I'm trying to use a certificate that appears to be having issues. I first noticed the issue when I attempted to create a certificate profile using a trust root CA. When I try to create the profile, it fails to create and has error message "CA -> *CA NAME* is invalid -> CA is invalid". I then went to e...

Block with paloalto the access to my internal network users to any page related to artificial intelligence

Hello, How can I block with paloalto the access to my internal network users to any page related to artificial intelligence? Thanks

Layer 3 sub interfaces on Hyper-V

Hi all, I am trying to get Palo Alto VM series (10.2.3) to work with layer 3 sub interfaces on Hyper-V (2022).I configured interface/subinterface from the documentation (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRkCAK)I also tried it with removing the ip.adr 192.168.4.252/24I also tried setting the vSwitch to tr...

Access PA-440 MGMT Interface via Cisco Switch

Hi Guys, I am working with below scenario and would like some help. As shown in diagram: A cisco switch IE3400 is connected with PA-440 with trunk connection and also one of the interface of switch is connected to MGMT port of PA-440. There are multiple VLANs in the network but I showed only the relevant in this case. Cisco Switch has Vlan 10...

Ensuring Accuracy: Introducing the Audit Date Stamp on LIVEcommunity

LIVEcommunity recently introduced a new feature to help you know when content has been reviewed for accuracy: the Audit Date Stamp. With this latest enhancement, you can now easily identify when an article has been audited, confirming that the information is current, screenshots are up-to-date, and any solutions or use cases function as expec...

Traffic redirects to captive portal

We currently have a policy in place that allows all HTTP and HTTPS traffic from a test server (Trust) with a static IP address to reach untrusted networks. However, when accessing the server from a browser, it automatically redirects to a captive portal and blocks internet access for server applications. The internet was functioning properly on ...

URL Profile Known Bad Categories

What are the known bad url categories that palo checks is blocked? We currently block all the categories in this document but AI-Ops still flags it. Is there a way to see specifically what its failing? Malicious URL Categories (paloaltonetworks.com)

How deactivate multi factor authentication

Backline support not answering - how to raise a case with Palo Alto directly

We are supposed to have 24 x 7 support through Westcon but have been unable to contact them. Previously when emailing their support an autoresponder would reply with a ticket number. Not even this happens now. The AUS support number rings out. Is it possible to raise a case with Palo Alto directly - we have a VPN issue that must be resolved by...

Replacing Cisco HSRP Pair with Palo in Active Standby - 2x ISP Transit BGP

Hi, Currently we have a pair of Cisco routers each connected to a different ISP with static addresses. We have a public address range 203.x.x.x/24. The inside interfaces of these pair of routers are .2 and .3 of this public address range and the HRSP .1 between them. Currently each router takes the full BGP tables from its connected ISP and ...