General Topics

Interface change sync

Hi we have two PA-3220 in an HA active/passive configuration

When i make a change to an interface on the passive firewall, for example i change the interface type to Aggregate Ethernet after i commit i see that the same interface on the active firewa

stdlib.syslogMiner issue

She wants him to **bleep** inside - https://livesex.cafe
My slutty neighbor cums on my **bleep** - https://livesexcams.fans
Red haired girl comes twice giving **bleep** - https://sexcam.blue

User-ID two usernames being identified by User-ID servers

Hi,

I am having troubles with getting the Palo's in my network to only use the UPN of a user in our environment. I would like to start creating security policies to control staff members access to resources based on their AD user rather than IP addres

Does PA fail closed by default?

I'll be darned if I can find any documentation that speaks to if/how interfaces are configured to fail closed if there's a system or interface issue.

Does anyone have a URL that talks to this?

Thanks, Jeff

IPv6 Support

Are there any updates as to if/when PAN will support DHCPv6 Client and IPv6 Prefix Delegation? This is preventing a purchase for me. Without the ability to receive an IPv6 address and prefix delegation dynamically on the WAN interface, this is a show

access logs from bluecoat proxy to windows user-id agent

Trying to get bluecoat proxy to send its access logs to windows user-id agent. configured custom log on bluecoat in the following format

PAN Source=$(c-ip) Username=$(cs-username) Action=$(s-action)

On user-id agent side I am seeing server receiving

Global protect - external gateway blocking?

In the global protect gateway settings where you can select the priority by region does the firewall block connections from any regions that are not included there?

this is the article discussing the feature I’m referring to:

 https://docs.paloaltonet

Can't enable user-id on sd-wan zones

I need to enable user-id on panos sdwan zones - e.g. zone-to-branch. I can enable it in the template on panorama, but it doesn't change on the firewall when pushed. Everything else is working fine, so this is not and template/stack issue. Is this a s

Panorama in AWS

In an AWS environment which is making use of the TGW and GWLB,  is it okay to deploy Panorama in a VPC that gets routed through GWLBe or should Panorama get deployed in the security VPC and have the route tables bypass all gwlb endpoints?

I'm wonde