Exporting all the rules and sub rules

I have been tasked with exporting all the rules from our Palo Altos for monthly review purposes.

Panorama has shared rules as well as rules in each device group. Our firewalls have rules on them as well.

• Support suggests using the PDF/CSV option

is it possible to limit the number of devices from which the a user can do the captive portal login?

is it possible to limit the number of devices from which the user can do the captive portal login?

Thanks for you prompt response

Vwire

Vwire is introducing latency please help me. by using vwire we are observing 80 ms of latency.

URL filtering for a School

I am using a Palo Alto 500 to filter url content on a school network. I have blocked streaming media but some sites like college humor still go through. How can I block all streaming video, also I would love to able to block flash games. I am new at

Power Adapter

Can you help me with some photos or the datasheet of the 150W and 50W AC power adapters?

ION 2000 Physical Memory low

ION 2000 Physical Memory low, how to verify the resource utilization

ION2000 controller connection failed "Analytics" not connected

ION2000 controller connection failed "Analytics" not connected

Ion# debug controller reachability controller
TPM and tcsd process is running fine
Mic cert check passed
Cic cert check passed
Mic cert verify passed
Cic cert verify passed
CIC cert connectio

syslog udp session keep alive ?

When forwarding logs, they are being sent to udp 514. The udp time out is 30 seconds, and the syslog server actually receives packets every 5 seconds. However, I wonder why the firewall keeps the session longer than 30 seconds. When the time is lon

failing back to primary FW and short loss of ISP connection

Good evening,

Tomorrow I'm cutting over a new pair of 3410's. I have 3 LAG connections (AE.1, AE.11, and AE.10). AE.11 is the physical connections to my ISP switch. There are two L3 sub interfaces (VLAN 800 & 801). VLAN 800 = ISP1 and VLAN 801 = ISP2

Policy action is allow, but session-end-reason is "policy-deny" PAN 8.1.12

Hi, All

The action of security policy is set to allow, but session-end-reason is shown as "policy-deny" in traffic monitor.

The PAN-OS version is 8.1.12 and SSL decryption is enabled.
Could someone please explain this to me?
If you need more informatio

problems after RMA of an active-passive pair

just to give a baseline - hardware are pa-5220, running 10.1.6-h6, HA (active/passive), device managed by Panorama.

Long story short - one of the firewalls got stuck on a reboot cycle where the firewall would reboot every 85 minutes. The data plane

ECMP

Dear Team,

Our question is "How can the firewall choose the route without configuring the ECMP"

Appreciate your support as mentioned in this documentation

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/ecmp

"Without this

Register Used PA-820

I need help. I bought a used PA-820 off eBay. Works great!

When I try to set up account on support.paloaltonetworks.com, I enter the serial number and SO.

However, each time, the registration fails. I get an error message telling me to try again la