Set zone to "any" in CLI

How can I set the zone for a rule to any in the CLI? If I delete the from / to lines it sets it to "none" which is not valid. If I set it to "any" then it thinks "any" is the name of the zone which is also incorrect. Any ideas?

Thanks!

PA-VM EVE || PA-HDF Mode issue

Hi Everyone,

As I am running PA-VM on eve-ng, when start its stucked in PA-HDF mode & automatically rebooting after few seconds, previously it was working fine, your suggestion/solution will be appreciated Thanks.

how to check traffic volume in IPSec tunnel

Is there any way to check the volume of traffic through an IPSec tunnel? We're being notified of spikes in volume through a tunnel but I'm not sure if there's a way to run a report or check metrics related to tunnel traffic.

Does anybody know how to install the cable management accessories that come with a PA-440 Rail kit?

I tried to get through to tech support with this, and I think I've faced easier quests trying to win money at a Casino!

We have a PA-440 rail kit that we are installing 2 PA-440's on.  The rail kit comes with a small baggy with cheap white zip ties,

HA Clustering Info

Hi all,

i have a question for all:

i have two datacenter  in two different city. The datacenters comunication in Layer 2 witn VRRP.

In primary DataCenter (active) i have two FW in Active/Passive (Peer HA), i would configurate a new FW in secondary data

"Non-existent domain" error with split tunnel for "Both Network traffic and DNS"

Dear community!

I have configured split tunnel for both Both Network traffic and DNS and it works fine. However while doing nslookups I get the  "Non-existent domain" error 

According to the document down below, this can be fixed by setting "Reso

How to setting up 3220 paloalto firewall to use an internal "safari-montage" server as a trusted referrer for YouTube.

How to setting up 3220 paloalto firewall to use an internal "safari-montage" server as a trusted referrer for YouTube. Can anyone help with this issue.

Enforcing Global Protect only on remote sessions

My company only allows company issued laptops (Windows only) to remotely connect to our network via VPN. Since these are company devices I feel they should always be restricted to company internet usage polices that only allow access to approved site

Clear Text and Tunnel traffic same physical interface QoS

Hi,

I have a scenario in mind, for example: 

1. We have physical interface for Internet link with a bandwidth of 50 Mbits/s, which is used to peer with our ISP and send internet-bound traffic through;

2. We have regular internet for users and VPN

site2site vpn. calling end is dynamic

I have a Palo gateway connecting via ipsec to a Palo gateway, the calling end has a dynamic IP and will need NAT-T.  The called end has a static public IP.  Whats the recommended method of using an identifier?