General Topics

Resolved! Using Salt Proxy to edit password in config on Palo Alto firewall PA-220

Hi, I am trying to use Salt to automate a config upload process. The problem is that the salt module for palo alto, called panos, needs access to the firewall on tcp443. "The panos proxy leverages the XML API functionality on the Palo Alto firewall. The Salt proxy must have access to the Palo Alto firewall on HTTPS (tcp/443)." from salt.proxy.pa...

Register DNS between GP and Internal Network

Hello team, The problem we are observing is that when devices switch from a corporate internal network to Global Protect and vice versa they do not update their reverse DNS record with the new IP received; it is clear that it is a problem between the devices and the DNS, but we wanted to know if from the firewall there is any configuration opt...

Resolved! Networking or Dataplane apparent reload (5200 w/10.1)

I'm experiencing issues of what seems to be a "sudden restart" of all OSPF/OSPFv3 neighborship on a PA-5220/PanOS 10.1.6 firewall. I'm trying to pinpoint the root problem on my own, since our support contact (a partner, not PA's support) is taking the route that the problem is on OSPF neighbors' side, which is unlikely to be true, since it would...

Resolved! PA 220 initial setup

Hello, I am trying to setup a PA 220 from home. I have a BT connection but am using a TP link archer wifi hub I followed the instructions but didnt get a connection https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFkCAK any advice is welcome Please note you are posting a public message where community members a...

Resolved! QOS Config

Hi, I want to define separate profiles for upload and download for sub-interface, I couldn't succeed, can you help with the issue? (ip subnets and zone is correct) if the TEST_DOWLOAND RULE is top it working for dowloand qos but not working UPLOAD qos rule. if the TEST_UPLOAD RULE is top it working for UPLOADqos but not working DOWLOAN...

Resolved! PanOS 10.1 Clustering

Hello, I am used to configuring clusters on PanOs 8.x and 9.x. I am now configuring a new infrastructure based on PanOs 10.1.8. I have seen new options in "High Availability".1) Under "General" tab what is "Clustering settings" for?2) what is "Cluster Config" for? Thanks

Threat Prevention Inline Cloud Analysis - Allow on Max Latency

With the new feature - Advanced Threat Prevention in PAN-OS 10.2 There are Inline Cloud Analysis in PAN-OS 10.2I found a new setup - Threat Prevention Inline Cloud Analysis under Device > Setup > Content-ID I would like to know what is the different with enable or not on "Allow on Max Latency".Is it means that exceed the Latency of Inline ...

Resolved! Not able to see the interface IP addresses using SNMP.

Hi All,I executed the command in SNMP to get MIB, but it is showing only interfaces not showing related IP addresses. what might be the problem ? Kindly help me.Regards,Gururaj.

Resolved! LDAP Members in group Issue

Issues with Members in a group and a security policy - pa 850/9.15 os level - I use ldap to sync with AD , I merged the groups I need in the include group option - I see all the groups in cli by using show groups - I can also list members in the group from cli , - I use Kerbose to sycn user id's and they also show up in the userid /monitor.. ...

Resolved! Some emails not working on iPhone behind PA

I have a weird problem. I installed a VM100 connected via PPPoE to the ISP, standard NAT, DHCP configured on the LAN side. Issue: unable to receive/send emails from iPhone from SOME providers using inherid IOS app:Corporate email: working via IOS email appiCloud email: not working via IOS email appGmail email: not working via IOS email app, but ...

What is PA equvalent to show Xlate to view NAT translations

Resolved! Palo Alto Bandwidth Throttling

Hello Everyone, I have a question regarding Palo Altos and bandwidth throttling. I know that the Palo Altos can do QoS to limit the bandwidth for specific applications, but can the Palo Altos just do bandwidth throttling with different networks? Say for instance, we have an office and guest network going to a Palo Alto firewall. Can you do a QoS...

Interface change sync

Hi we have two PA-3220 in an HA active/passive configuration When i make a change to an interface on the passive firewall, for example i change the interface type to Aggregate Ethernet after i commit i see that the same interface on the active firewall will also be changed to type Aggregate Ethernet with the same Aggregate Group specified. Is th...

Resolved! global protect

hi, I have a small question. I would like to know which version of global protect is compatible with both versions of windows 10 and windows 11. Kind regards

Resolved! Video and speed are slow when using MS-teams

Hello.Currently using ms-teams.In use, if many users participate in a meeting, the picture quality and speed deteriorate.Because the paloalto firewall is also in the middle of the network environment, the operation of the firewall is also suspicious.No packets appear to be blocked.Could you please let me know if you are experiencing the same sym...

Discussions

Resolved! Using Salt Proxy to edit password in config on Palo Alto firewall PA-220

Register DNS between GP and Internal Network