We set up Palo Alto Networks - Admin UI in Azure to use SSO for admin access. Works fine except the option to save search filters is greyed out.
We are planning to replace PA-3260 with PA-3430, can anyone suggest the procedures and prerequisites to be followed before replacing the firewalls. Currently the firewalls are managed from Panorama.
Hello, I have been trying to block the site theoxymoron.xyz but can not get it to block. I have tried URL filtering with many different versions of the URL as well as blocking the IP addresses for the site, neither of which worked for me. We do not use decryption. Any help would be appreciated. Thank you.
I'm trying to setup my PA-220 to use the AIOps and need to login into the Palo Alto customer support portal. I have not logged in for a long time, but when I use the account associated with my device, it tells me "Unable to sign in". Trying forgot password, sends no email to the email account. When I try to create an account and enter Serial ...
Hello all. We are demoing ManageEngine's OpUtils which advertises it can monitor Palo Alto DHCP scopes. I have it connecting to one of our palos via Web API credentials just fine, it just doesnt return any data about the DHCP that is configured. I was curious if anyone had any advice on special configuration needed or special permissions? If...
Two Static Route - same destination, Same metric Hello, good afternoon, thank you very much for your time, collaboration, time and suggestions. Thinking in an environment where you have two routes to the same segment, example a pair of static routes through the Switch Core to LAN resources or two routes to the same destination, by two tunnel...
Hello All! We are having an issue regarding the Palo self-signed certificates.As suggested without 3rd party paid certificate we are using a self signed CA and a certi issued by the CA.(added to the proper ssl/tls service profile) But the vpn portal does not show the generated Cert with the self signed CA, it shows the generated Cert with an unk...
Firewalls with DNS Security enabled and working in PAN-OS 9.1 logs are not visible in AIOps DNS Security (Activity:Dashboards > DNS Security - View all DNS Requests). How to ensure firewalls and Panorama are properly configured and log data is reaching AIOps
Hi Team Anyway, one having any idea about the below error 'Retrieving Content 'IOT' info failed' Error getting on Panorama however, the customer not having any IOT license. Please find the attached snap shot of the error. Regards Roney RajanPlease note you are posting a public message where community members and experts can provide ...
Last couple of days I've had quite a few cases where I had to manually add intermediate CAs as a Trusted Root CA in order for decryption to work (for customers blocking untrusted CAs already on firewall). These are quite well known intermediate CAs like: DigiCert TLS RSA SHA256 2020 CA1 GeoTrust RSA CA 2018 Entrust Certification Authority - L...
Hi All Need a sanity check. When deploying multiple ISPs using path monitoring, instead of policy based forwarding, should the 2nd ISP become unreachable? It makes sense that it does, but it wasn't mentioned in Palo article about it Setup would be ISP1 (e1/1) 0.0.0.0/0 1.1.1.254 priority 10 (with path monitoring) ISP2 (e1/4) 0.0.0.0/0 ...
Hello everybody! It appears that PanOS 10.2 has the ability to export Software. However, I'm receiving the following error when attempting to do so. For reference, I am attempting to do this from Panorama. The scheduled config export to the same SCP server works fine. Has anyone managed to make this work? Thanks!
Hi, We have multiple 'Admin Roles' setup and we have noticed the 'Highlight Unused Rules' tick box at the bottom on the policies page is missing. What permission am i missing to allow this? Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial nu...
Hi Experts,I have the following scenario: a pair of PA 5220 (running pan os 8.1.10) in an ACTIVE / ACTIVE Setup (session owner 1st Packter - session setup 1st Packet) -We have been running Active / Active since roughtly 2 Years now without any significant problems. However tftp (PXE Boot) session in an asymmetric scenario do not get properly syn...
Hello all, Recently (these two weeks) I have encountered SSO Error when browsing to KB & Support Case pages which I don't have such issue before. https://knowledgebase.paloaltonetworks.com/ https://supportcases.paloaltonetworks.com/_nc_external/identity/saml/SamlError Tried with Chrome and Edge, clear the cache which showed the same...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
