General Topics

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...

Resolved! Passive PA and IPSEC Connections

We have PA in active passive mode, We have ipsec connections going to end devices.When i check the passive PA GUI I see All Phase 1 connections as redAll Phase 2 connections as green IS this normal behaviour?

Resolved! allowing and denying ip address traffic on VWIRE?

i have a core switch and a router which connects to other router to reach the internet , i was wondering if i put the palo alto as a VWIRE between the core switch and the router would i be able to control which ip addresses can go to the internet and...

Resolved! managment port importance?

this is my first time deploying palo alto , is it important to have the managment port connected? does it play important role in the device function or is it just solely for managment?like can i manage the device from the inside interface only?

Resolved! Phase 1 ike logs cookie:ff4e9af69a787ea4:0000000000000000

does 0000000000000000 mean that PA is not able to communicate with partner?

Resolved! The DPD is "not persistent" and is only triggered by a Phase 2 rekey

I was reading this KB article about DPD does this mean that say when phase 1 is down or its lifetime expires will DPD will come into play? or when when phase 1 is red and phase 2 about to expire rekey will happen for phase 2 then DPD will come into p...

How do I make a feature request for GlobalProtect?

I'd love it if the last Gateway I used was the default on my list instead of Best Available. Or if this was an option that I can turn on. If I am on a different network, perhaps it makes sense to default to Best Available, but it never picks the best...

Resolved! Recommended PAN-OS version

Hi community Today I was informed by @pshanubhog that there now is an article available in the live community about the recommended/preferred software versions by PaloAlto Networks support. The article contains the preferred versions by support for P...

Resolved! Meraki behind PA850 - Site-to-site, Error Unfriendly NAT configuration

Hi All, I am working on a implementation of the Meraki MXs behind PA850 - Site-to-site ( hub and spoke). I am getting error on the VPN status: NAT type: Unfriendly. This security appliance is behind a VPN-unfriendly NAT, which can be caused by upstre...

Disk usage for / exceeds limit, 95 percent in use.

I know there have been several messages about this issue, but so far, the only solution Palo Alto has given, is to update to a new version. We have followed PA suggestions and months after the update, the issue starts again and their solution will be...

Global protect split tunnel setup

Hi I have 8.1.5 on the pa and 4.1.11-9 client I have setup the gateway for video traffic exclusion, and selected youtube-streaming netflix-streaming But a simple test shows utube still come over the tunnel address I want to allow MS Teams to by pass ...

Resolved! Question about Global Protect and ip pools

Hi Can any one explain the difference between the ip poolsa) Global protect / gateways ... external gateway / agent / Client ip poolvsb) Global protect / gateways ... external gateway / agent / client setting / ip pool so fora) I can't reference an o...

Panorama Pan OS Automatic Update to Managed Firewall Devices

Hi, I currently manage a group of Palo Alto FW Devices (5220, 800, 3200 and 200 series) via a Panorama M-100 Series Appliance. I would like to know if Panorama pushes automatically PAN OS SW Update (at the PAN OS - level only - not AV, AppID or Wildf...

phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A

i am able to establish tunnel with vendorcan ping the vendor lan ip but ikemgr shows2019-05-02 13:01:54.000 -0600 [PWRN]: { : 94}: phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A.

Multiple copies of Content Update e-mail since 8145

Before I open a support ticket about this, I wanted to check if it was only happening to me or if others have been experiencing the same thing. Up until April 17, 2019 I would only receive a single copy of the daily "Palo Alto Networks Content Update...

Resolved! Palo Alto firewall vs Web Proxy

Hi folks, I am trying to understand what references mean when mentioning Palo Alto firewall as a web proxy or any reference to it that way.I mean, from what I gather, the PA does not cache web requests like a web proxy product would, or rewrite URLs,...

Forum Posts

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

Resolved! Passive PA and IPSEC Connections

Resolved! allowing and denying ip address traffic on VWIRE?

Resolved! managment port importance?

Resolved! Phase 1 ike logs cookie:ff4e9af69a787ea4:0000000000000000

Resolved! The DPD is "not persistent" and is only triggered by a Phase 2 rekey

How do I make a feature request for GlobalProtect?

Resolved! Recommended PAN-OS version

Resolved! Meraki behind PA850 - Site-to-site, Error Unfriendly NAT configuration

Disk usage for / exceeds limit, 95 percent in use.

Global protect split tunnel setup

Resolved! Question about Global Protect and ip pools

Panorama Pan OS Automatic Update to Managed Firewall Devices

phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A

Multiple copies of Content Update e-mail since 8145

Resolved! Palo Alto firewall vs Web Proxy

Recommended Pan-OS version

Can PA-220 support 3000+ users with one user ID group mapping

Applipledia is DOWN

Panorama SYSLOG Forwarding

Prevent 3rd party VPN from changing DNS

Knowledge sharing: restarting palo alto processes , reboot , shutdown, factory default reset

User-ID not populating after Microsoft patching - Warning

Re: Network Access Control

Knowledge sharing: Palo Alto General Logs and Log files that are in the managment, data and control planes overview/review

Re: Palo Alto Globalprotect app to gateway communication impact because of free hotel Wi-Fi.

Network Security

Cloud Security

Security Operations

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

Resolved! Passive PA and IPSEC Connections

Resolved! allowing and denying ip address traffic on VWIRE?

Resolved! managment port importance?

Resolved! Phase 1 ike logs cookie:ff4e9af69a787ea4:0000000000000000

Resolved! The DPD is "not persistent" and is only triggered by a Phase 2 rekey

Resolved! Recommended PAN-OS version

Resolved! Meraki behind PA850 - Site-to-site, Error Unfriendly NAT configuration

Resolved! Question about Global Protect and ip pools

Resolved! Palo Alto firewall vs Web Proxy