IPv6 and IPv4 addresses in same security rule?

is there an issue with doing this - I have a rule set to match any address except one particular IPv4 subnet (ie using the negate function) - works fine.

I added an IPv6 prefix to the rule (still negated) - now the rule negatively matches the v6 addre

GlobalProtect client for macOS 12 Monterey

Anyone know if/when there will be support of GlobalProtect running on macOS 12/Monterey?

QoS / WRED

Hi All,

Just wondering, is WRED configurable on PA firewalls?

If the models matter, I'm using 3000's and 3200's.

Thanks!

SCCM : Clients to DP communication

Following is the one of prerequisites to set up a SCCM infra, is there any existing app-id that  can be used to cover this port  requirement. Will it need an explicit rule based on port/service range only  or any changes needed in  VR (IP multicast p

Clear Continue Timeout URL Cache

Hey Everyone,

Is there anyway to clear the Custom category URL Continue timeout cache on Prisma/Panorama? 

Thanks,
Nisha

Heartbeat Backup showing down on both HA peers

I have an active passive configuration which seems to be working and has failed over successfuly in the past (possibly a year ago).  According to the PA docs I read the heart beat is a ping that runs every 1000ms.  I assume since the heartbeat backup

MineMeld on Ubuntu 20.04 LTS

Hi Community,

since April 2021 is getting nearer, Ubuntu LTS 16.04 is getting nearer to end of life.

Is there any version successfully tested for Ubuntu 18.04 LTS or 20.04 LTS?

Last time I tried installing it, installation failed due to dependenc

Can I configuration send traffic log to syslog on global

I searched on internet and I found only setting send traffic log to syslog by per security rule. on situation that has multiple security rules (100-200 rules). Can I set Syslog on global? or It can be set only per security rule?

Any chance of an Automated Rollback on Palo Alto firewalls?

Hi-

Im familiar with Juniper equipment which all have the option to 'commit confirm' which automatically reverts the config change if a 2nd commit is not made within a certain period (default 10 mins I think).

Its a life-saver if you have to administ