SNMP traps for power supply monitoring on PA-5260 MIB

Hi Team, We have an PA-5260 deployed in our environment. Need to monitor the firewall using SNMP manager for power failure or when the power supply removed. Firewall is running on PAN-OS 10.0 and we had downloaded the MIB file from the below link and loaded the MIB file for PANTrapshttps://docs.paloaltonetworks.com/resources/snmp-mib-files But ...

Panorama software upgrade disk space issue

I am getting following error when trying to download firmware in Panorama VM.Error: There is not enough free disk space to complete the desired operation. Delete older software, dynamic update, or client versions to free additional disk space before trying the operation again. Use the 'set max-num-images count' CLI command to adjust the number o...

PA GP not allowing users to connect

Hi guys, The other day suddenly none of customer users were able to connect to their VPN, upon further inspection we tried to access to the portal through web and instead of showing the login we were returned "502 Bad Gateway" error. In order to solve the problem we just restarted the sslvpn process and afterwards the VPN started working fin...

ssl-inbound inspection problem

Hello everyone. i'm configuring decryption with ssl-inbound inspection towards a nas synology via DNAT port-forwarding but i'm having trouble working with the following error that gives me the browser "PR_END_OF_FILE_ERROR". DNAT without ssl-inbound inspection works fine without certificate errors if I try to reach the web server from outside....

GCP Deployment challenges

I thought I'd share with you a few of the Google Cloud Platform VM-Series deployment challenges I ran into recently. First off, read the documentation carefully, this is a new product and the docs are being updated regularly, not to mention that GCP and their documentation is also constantly undergoing tweaks. One thing that wasn't immediately ...

HA Passive Link State Auto - Vwire Interfaces

HA Passive Link State Auto - Vwire Interfaces Hello good evening, thank you very much for the collaboration. In HA I have configured the passive link in AUTO, in the layer 3 firewall, this works correctly and the secondary firewall interfaces appear as green UP. But in the equipment with "Vwire", in the secondary equipment they appear in red...

Admin account - Minimum Password Complexity - Firewall - Panorama

Admin account - Minimum Password Complexity - Firewall - Panorama Hello good evening, as always, thanks for the time and for the collaboration. In the "Device / Setup / Minimum Password Complexity" section, the settings made there, including password length, password forcing time, etc. These settings are also applied to the default account (...

Palo Alto Updates Detected as a Threat

Hello all, im using content update app and threat 8628-7631 and antivirus 4233-4746 on this day. is there any url database update on app and threat 8628-7631 and antivirus 4233-4746? i have a problem on firewall palo alto, that firewall detected palo alto updates as a threat. the management traffic is traverse the firewall. i have policy to a...

Help Explaining Interface Counters

I have a couple of ports on different PA's showing various interface errors. Just looking for some help deciphering and find a solution for the interface. PA-7000 series running PAN-OS 9.1.13. Output for the "show counter interface" command is below for each interface. Thanks!! Interface: ethernet2/7------------------------------------------...

Devices managed through Panorama - Unable to export entire device config

Hi, When I have a firewall managed through Panorama, I am unable to figure out a way to export the devices complete config file in xml. I have tried Export Panorama and devices config bundle but I only get a few basic settings in the XML. No policies, or Interface settings. Even when I log into a PA manually and export the config I only ge...

Skype Stun Not Allowed due to incorrect UDP Port in APP-ID

Hi, One of my customers is having an issue where by Skype is not being allowed through despite the Stun and RTP applications being allowed through: Previously we'd used the 'skype' and 'skype-probe' but this was not matching with the traffic. Looking through the traffic logs the traffic is being denied because Stun is running on a high level po...

Credential agent crashes LSASS

Setup a 2016 RODC so I could use the Credential Agent.As soon as I try starting the agent as system, the server pops a message that I will be force restarted in 1 minute. It non-gracefully reboots in 1 minute. I tried agent v10 and v9. Perms and settings appear fine afaik, and suppressing a/v didn't help. Palo sent me a suggestion to roll back p...

What is cyber security?