Panorama showing incorrect device IP

Morning all. We are onboarding 90 or so pa410 firewalls and did our initial config and update with ZTP, at which point panorama showed the managed devices as their DHCP address on a /24 I gave them.

we are now using the dedicated WAN interface for

Error on Importing config of new firewall

Hi,

I get following error, when importing config of new firewalls i am trying to onboard into Panorama.

Quick AP ID related question google-docs

Just looking of for clarification around google-docs app IDs. If I allow the google-docs container ID in a policy\app group...I'm essentially including ALL the child apps contained within.... correct. ???

No need to explicitly specify the child apps

Are Virtual Routers required?

Firewalls disconnected after upgrade to 10.1.6-h6

CHECK if Palo-HA pair are no longer connected because of an empty “auth-key”?

Panorama → Managed Devices → Summary

<<Check Certification Column (Should have “pre-defined”) >>

(1) –GENERATE-- OR --COPY-- <panorama-auth-key>

Panorama → Device Regis

How Do I Actually Get Support From Palo Alto?

So I purchased premium support for my device but when I go to the website to create a support ticket, I get to a point where the ticket is blocked by a window telling me that I am being redirected to the live community. If I click continue a new tab

Radius Accounting

Is there a way to configure the boxes to act as a NAS by sending a Radius Server (like Freeradius) accounting information? I am particularly interested on the session start and session stop attributes. I am about to provide Globalprotect VPN access t

Error while disabling tunnel.

Hi All,

We are running PA with firmware 9.0.4

Getting errors while "disabling" not required/unsed IPSec tunnel.

Error: tunnel interface tunnel.50 encap interface is not set.

Error: parse tunnel member failed.

Error: error parse qos tunnel group

Error: er

Rules from One Zone to another Zone

Hello All,

from the GUI i can get all the security policies from one zone to another, However, from the CLI, is there a way?

for example : i need all the policies from Orange_Zone to Free- App_Zone

"Orange to DEVDB11-1; index: 1333" {
from Orang

User-ID Agent

Hello!

I have a Palo Alto with version 9.1.5 installed and I want to install a User-ID Agent, which version can I install?

Rate increase in flow_ipv6_disabled

Hi All,

Is there any way to check which source of this flow_ipv6_disabled?

Our monitoring tool keeps on alerting us due to these parse packet drops. 

When I run the command below, I don't see any logs on Palo Alto's monitor. 

debug dataplane p

What is the difference between Premium Support License and Standard for PA-820

I am trying to find out the differences in Premium versus Standard Support licenses for our PA-220s.  I was able to find a doc for Premium, no luck with Standard.  Please advise

Join Palo Alto Networks at SASE Converge 2022!

Is your network ready for a new hybrid work environment? Join Palo Alto Networks leadership and industry experts at SASE Converge 2022 to learn about the latest trends and innovations in SASE!

Check out the agenda and register for SASE Converge