General Topics

Resolved! PA 820 Has Validate Export and Reinstall all together under Software

Hi All, Just saw three options (Validate Export and Reinstall) altogether under Device>Software (action tab)for PA 820 for PAN OS 10.2.0 . (I can see other versions also have the same 3 options) (apologies for the blurry pic) Wondering if this is normal or any action is needed as I do not see this on other FW-PA 440 as pictured. Thank you i...

Resolved! Panorama and vm upgrade

Hello all! Im gonna upgrade Panorama + a bunch of vms from 10.1.0 to 10.2.x. On the path up to 10.2.x, do i need to stop at 10.1.8 before upgrading to 10.2.x? Or can i just take a leap from 10.1 to 10.2? Also, running Panorama at 10.2.2-h2 and vm's at 10.1.0, will that cause any issues? Or would that be problem free? I expect to run like this...

Resolved! OS Upgrade from 10.0.10 to 10.1.6 U-Turn NAT Stopped Working

Hello, Originally on our PA-3250's we used Source with Bi-Directional NAT and just added in the trusted zone(s) to the security policy for U-Turn NAT to work, and this worked flawlessly. Now we upgraded to 10.1.6 from 10.0.10 and it stopped working. We were able to get some sites working with a new U-Turn NAT statement as mentioned in the arti...

QOS statistics cli

Hi,Is there a way to see QOS statistics users tab for a class from cli ?Thanks.

Downgrade Firewall from 10.0.0 to 9.1.1

Greeting Team! I noticed some problems with a downgrade in my internal lab. So, some information: I want to downgrade from 10.1.7 to 9.1.1 (i need it for the experiment). 1st step i downgrade from 10.1.7 to 10.0.0, everything fine. But, when I want to downgrade from 10.0.0 to 9.1.1 I faced an error with: Upstream NAT not supported on 9.1.1, plea...

wharsapp block

I have blocked WhatsApp on my laptop but not blocking on my mobile. My laptop going to authenticate throw the Active directory. Also, my mobile wifi going to authenticate throw the Active directory but on mobile WhatsApp not going to block please suggest.

Resolved! GLobal Protect Spit Tunnel not restricting domain/applications.

Due to the Void-19 situation and users having to work from home. My company want to reduce bandwidth Utilization by excluding Zoom traffic through global protect. the I.T team has decided to exclude zoom by configuring the "Exclude Client application process name" and adding the path in windows program file for both Win10 and 7. C:\Program Files...

How to find ALL the links related to a website.

Looking for the better idea. User reported xyz.com site is not working, When I look at the firewall logs xyz.com was allowed in firewall. And I filtered the logs with source IP for 5mins time frame and found deny logs for particular IP address 1.1.1.1 I am not sure what is the url for 1.1.1.1, In such case what you will do to find the URL for 1....

Resolved! QoS - Guaranteed bandwith

Hi Team! I'd like to ask about QoS Guaranteed Egress, because I'm not sure I understand the topic well. (used devices PA-220 and VM-100) Here's what I need to do: My branch office bandwith is limited by the ISP to 30Mbit/sec (ethernet1/1 WAN interface). I need to shape traffic to guarantee some bandwith to different kind of traffic classes...

Resolved! How to configure per-client certs on GlobalProtect?

NOTE: the freeware pfsense firewall can configure a working VPN with user passwords and user certs (2FA) inside of 20 MINUTES. With Palo Alto Networks, I'm on WEEK 6. Where I am at:1) I have GlobalProtect working with password auth. (Had to call tech support, who knew what steps were missing from the documentation.)2) I want to have 2FA: so, I s...

OID SNMP FAN AND POWER SUPPLY PAN 3220

hello friend, nice to meet you, I wanted to see if anyone knows if the PAN 3220 with Pan-OS 9.1 supports the OIDs to know the operating status of the power supply and the FAN

PAN-DB URL Filtering Categories list for PAN-OS 10.1.x

Does this document below apply to PAN-OS 10.x.x or just for <9.1 Where Can I Find a Complete List of PAN-DB URL Filtering Catego... - Knowledge Base - Palo Alto Networks We are trying to block URLs on both 9.1.x & 10.1.x, but it seems there are URL categories on the document that are not available for all versions of PAN-OS. We implem...

Web GUI doesn't display any software versions

After installing a new PAN-OS and going to Device/Software tab, it's blank. Nothing there, not even the old PAN-OS. Any help is appreciated.

Want to allow specific file name file blocking

Hello Team, Please let me know is there any way to allow particular file name . Example:- I want to allow for all user that they can download test.txt but i want to block all other .txt file.

Resolved! ctd-agent-connection error

Dear Team, The following error is occurring in the firewall type : ctd-agent severity : high event : ctd-agent-connection description : Failed to establish GRPC connection to service : failed to start grpc connection with address ----- I would like to know what causes this error and how to fix it If anyone has had a similar experience, p...

Discussions