Palo Alto 5220-HA connected to Panorama with Templates and Device Groups and to these same Firewalls config and apply VSYSX, vsys2,vys3,vsys4

Hello good evening Live Community, as always thanks for the collaboration and your time. Any of you have had to do the following: Detail Environment/infra: HA 5220 x 8 connected to Panorama with Device Groups and Template Stack. What are you looking to validate and be able to do, generate new Virtual Systems for new traffic on these HA mac...

Second backup endpoint for IPSEC tunnel

Is there a document that describes how best to configure a backup IPSEC endpoint on an IPSEC tunnel should the primary endpoint go down? Is it just a matter of two tunnels and setting the routing properly or can this be done with a single tunnel configuration but a second endpoint?

URL Categories - "Music" vs. "Entertainment and Arts"

Does anyone else feel like the Palo Alto URL Filtering categories "Music" and "Entertainment and Arts" have a lot of potential for confusing crossover? Name: Music Description: Music sales, distribution, or information. Includes websites for music artists, groups, labels, events, lyrics, and other information regarding the music business. Na...

Azure IP Ranges and Service Tags – Public Cloud from json

What configuration to use to get these Azure Services in own output nodes? https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519

Disable User

Is it possible to disable a user (local account)? I don't see this option in the web gui, but thought it might be something that can be done using the cli. I need to be able to allow access for specific reasons at specific times and disable access when not needed. Changing the user's password each time is the only other option I can think of so ...

Need help to achieve IPsec VPN failover between Paloalto to Meraki

Hi All, Need help to achieve IPsec VPN failover between Paloalto to Meraki

Renew older VM-100 or VM-300 to the new NGFW credit system

Anyone have any documentational or ideas of how to renew an older VM-100 or VM-300 to the new NGFW credit system? Anyone have any clues what the actual requirements/process is to do so?

Need help to open a Web Case for GlobalProtect 6.3

PAN Agent service does not auto start

Hi Everyone,I have the PAN Terminal Server Agent installed on several Windows 2008 servers. The service works fine and I have no problems with geting the UserID info when the service is running. The problem is that when the server is rebooted, the service does not automatically start up, causing it to need to be manually started. Is this the exp...

Automate the dynamic creation of address objects in Panorama and add to an existing address group

Guys, I need to create 1000 object addresses and add them to an already existing address group in Panorama. Manually it would take days. Does anyone know how to do this via script?

Redirecting certain websites to backup PA?

Hi, Is it possible to redirect websites to route to our secondary data centre rather than our primary? There is a PA850 at each of the sites, but for some reason our main data centre is being 403 Forbidden blocked, or being blocked for being behind a "vpn" which it isn't. Basically I just want to set it up so if people go to www.example.com ...