Source NAT question

hello,

Is it possible to make NAT source by specifying the source port on which I appear for the remote server?

let me explain :

I am located in an inside zone and I would like to go to a specific zone that we will call "partner"
I would like to acc

Urgent Updates: PAN-OS Expired Certificates

Hi everybody,

We have trying to update or upload an update for our NGFW Palo Alto 220 on the November 2023 advisory. But when we logged to our Customer Support Portal and try do all the recommendations, we had trouble in the pre-last step which says:

minemeld newbie

I have been asked to spin up minemeld on Linux, but everything I find seems quite dated. The only link I found dates back to 2017 and suggests installing on Ubuntu 14.04. Can anybody nudge me in the right direction?

User's Guide · PaloAltoNetworks/mi

Cortex XDR exceptions.

From the endpoint is there a way to see what exceptions are being applied? I assume I should be able to find that somewhere in the support file that is generated, but I'm not sure where in there to look. Can someone point this out to me?

Getting the SpeedTest.net servers with MineMeld

This is less a question needing an answer and more a "so you don't have to go through my pain" type of post.

I was having a problem with SpeedTest.net where the suggestion of a server for testing was taking over a minute to appear after the rest of t

Can't log in to Web UI

After updating my PA200, logging into the Web UI has the browser showing it's creating 'Creating an administrative session...' then it restarts with a login screen. 

There's only one account, and it's credentials work to log in via the CLI. Thoughts

Best practice for reducing Log ingestion for DNS traffic logs to 3rd party log servers

Hi All,

Need some opinions please..

I have a client who wants to ingest their PAN logs (panorama managed) into Sentinel.
However looking at the log data we will be ingesting around 40-50GB of log traffic per day which from a costing perspective is go

Inquire how to stop EDL updates from going through Proxy Server

I'm currently receiving Palo Alto updates via proxy server.
Device > Setup > Services > Proxy Server

I have now built an internal web server to use EDL.
I want to update EDL without going through Proxy Server.

I set EDL Source/Destination in the service

Global Protect - SAML Authentication Complete Page

We're testing upgrading to version 2.5.x and have run into a few changes with the new features.

We enabled "Use Default Browser for SAML Authentication", because you know ie, is going away.  After doing this, each time our end user authenticates, the