Hello, looking at the PA-415 for a small office and I can't seem to find the minimum code required. The datasheet shows performance results using OS 11.0 but there's nothing to indicate if you can use 10.2 code. TIA!
Hi, You can't configure an Ethernet Interface as a DHCP Client for IPv6 like the IPv4.Does anyone know this will be supported in the (near) future?I can't find anything about this.
From one of our management servers (Windows Server 2016) SMB traffic is identified as active-directory, but from user clients it's correctly identified as ms-ds-smbv2. Anyone come across this? We have several storage solutions (NetApp filer, iSCSI, DFS on Fibre Channel storage), and it seems to happen with all of them. One more thing: this only...
Hello, I'm managing several PA firewalls (10.2.2, 10.2.3, 10.2.4-h2) via Panorama (10.2.4-h2), I noticed a delay in AV, Content and App update deployment, sometimes it's days or even weeks. For example, the App update is planned to check and install every 30 mins. Release time is 3:30 in the morning, now it's 6:40 am here and the downlo...
Dear community, I have observed that processes "log_index" and "stats_gen" appear in "suspended" state sometimes. We didn´t notice any issue though. Do you know if that´s a normal behavior? Kind Regards!
Good day, I have an inquiry regarding virtual router. We are transferring our ISP from vsys2 to vsys1. So, we encountered a message while in the ECMP configuration that requires for the Virtual Router to be restarted. So, here's my questions, what services might be affected once we restart the VR and for how long does the restart will take? A...
Good morning, I currently use a reduced version of Global Protect VPN, every time I start the program it asks me to update, but for company reasons I shouldn't. The version I'm using doesn't have as many menus and there's no part to remove the update checkbox. Could someone tell me if it's possible with some registry configuration or something s...
I suspect my pair of pa3020s stopped passing data for a couple of minutes. How do i check? They're running panos 9.1.13-h3
In your experience, what are the most common mistakes you have had when implementing Cortex XDR in a company?, enable ports, basic configuration, etc. Cortex XDR
Hi All, When it comes to Static NAT it will be one to one NAT in vendors like Checkpoint and Cisco ASA. I am bit confused with the NAT configuration in Palo Alto. Went through config guide and examples of NAT as well but still confused. We have a scenario as below. We have 3 zones - WAN, LAN and DMZ. Users want to reach DMZ interface from WAN an...
I get this error when i try and log in OZ3-06-05 06 : 11.0Z5 -0700 Error :sysd_construct_sync_importer(sysd_sync .c : 360): sysd_sync_register() failed: (111) Unknown
Hii we are trying to access our internal storage using SFTP from internet. after applying file blocking profile we are able to access mentioned files but firewall not restrict the file. we found that file blocking is not happening. Please advise how to block files when using SFTP.
by testing a ssh skript i get an "unknown command" error from the CLI user@host:~/> cat reset.sh ssh -t -t fw.domain.de << EOF set cli pager off show user ip-user-mapping all type CP debug user-id reset captive-portal ip-address 1.2.3.4 quit EOF user@host:~/> ./reset.sh Last login: Fri Jun 2 23:05:16 2023 from 10.10.10.11 set ...
Hi All, I have access to the PA HUB and want to run a SLR review for a client's NGFW (i have a statsdump file) however it is asking me to activate this service and requires a cortex data lake instance of which i don't have one, is this still doable? also if i do activate - what does it entail if i want to run future SLRs for potentially other cl...
Dear colleagues, I am having trouble with the custom Nagios plugin check_paloalto, specifically with the "certificates" check. The rest of the checks are working fine. Basically, the "certificates" check leverages the API calls and parse the XML running configuration file to find the certificates. The issue is that my firewalls (which are ma...
reaper
on:
Server monitering -Connection refused
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
