Can you setup a S2S VPN behind your Outside (untrusted) interface on same firewall?

HiI am using a pair of PA-3250 in HA and have 17 S2S VPNs using my outside interface that has /24 public IP assigned to it. Due to ongoing issues with our current internet, we have decided to move to a different internet platform (DIA) and enhance our redundancy (enable BGP).However, with this new setup, the ISP must give us a new /29 block to e...

Upgrading PAN-OS active/passive question

I have 2 firewalls in active/passive mode. Am I able to upgrade one of the PAN's and leave the other in standby or passive mode for a few days while I ensure there are no issues before upgrading the second PAN? It is a jump bigger than 2 versions so the PAN I do not upgrade should go into standby mode. Will I be able to then upgrade the device i...

Global Protect

Entered the credentials, got the push. Gp is showing connecting and after 2 sec showing not connected and minimizes the agent. Exactly after 5 sec agent pops up.. Started spinning and gets connected.(Without asking for credential and push mfa) Version :6.1.0

OOM-Killer on 8.1 Trail (PA-5050 device)

Hi, i know this is about old software on old hardware, but both are still supported by Palo Alto. In the last months we get a heavy amount of OOM Message / Stack Traces / you name it. Actually we arent able to push new config changes from Panorama to the both devices. Everytime the commit will be aborted by some OOM activities and mostly the M...

Can Applications be filtered in some way in Cortex XDR report?

Hello all! I hope your day is going well!I wanted to know if Cortex XDR has the availability to filter applications in a report?What my goal is : For example I have 20 systems. Is there any way that I can put a filter on them, to see what Applications those systems have?For example, this is now happening with Groups. I can see what groups are as...

Creating a support case forwards me to LIVE community

Hello, We have a Panorama premium support and recently trying to create a TAC case and request for engineer on the support portal. But recently we are unable to create one and instead recommend us to use the LIVE community. is there still a way we can create a support ticket and set a call with a TAC engineer? for your advice.

Inquiry about API key

In order to receive the Palo Alto Firewall api keyI checked " curl -k -X GET 'https://<fw-ip>/api/?type=keygen&user=<id>&password=<password>' " in the docsbut where is this command have to enter it? https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-panorama-api/get-started-with-the-pan-os-xml-api/get-your-api-key

Count Palo Alto Memory Usage

Hello All, I want to ask about memory on PA-850 and PA-3410. i use the calculation "Free Memory/Total Memory = xxx %" and the rest i assume is the used memory but when i see the memory utilization on PA-3410 its only have 210MB for free memory. so when i use the calculation, the free memory only 1% from the total memory, it has a large numb...

mdns forwarding between vlans no option

hi guys how can I enable mdns forwarding between l3 vlans (my ports are essentially l2 bridges into groups with l3 vlan interfaces having ips and running dchp servers) it seem like bonjur forwarding can only be enabled on physical l3 and not l3 vlans not quite sure what to do thank youalex

Hi, a Windows 10 with agent 7.9.1.26645 can´t upgrade windows after agent installation.

Collecting customer deployment information

Given I am a newbie to Palo, I am running through the PSE Strata Associate training and have seen this statement (or something like it) many times : using intelligence generated across many thousands of customer deployments. This prompts a few questions: 1. What is being sent from these customer deployments for this analysis to be done ? 2....

IKE phase 1 not working

I'm trying to setup a site-to-site VPN between Palo 820 and a Cisco ASA. I've checked the configs and both are matching OK with correct PSK. I've configured the proxy IDs accordingly. I don't have access to the Cisco ASA as this is on the customer side however they sent me the config so I can confirm that crypto settings, psk are matching. T...