General Topics

Policy Based Forwarding is not working for Secondary ISP

We recently added a new Internet link to our PA-3020. We want only one server (10.1.12.130) to use it, so we configured the new internet link interface as layer-3 , assigned it a static IP, created a PBF policy that basically specifies the zone (internal) and the source IP (10.1.12.130) and the destination is any (negate 10.0.0.0/8) and the ac...

Data Filtiring logs not Show on GUI

I got a problem with showing logs. In past I got problems with threat and data filtering logs, they are simply not showing on the monitor tab. I clean some space from the disc and upgrade pan-os to next version, threat logs start working, but still no data filtering. This problem is on 2 VM firewalls. I cheack root partition (30 percent availab...

Panorama Log Retention Command

Hi, I am running the command to show the Panorama log retention details on a Panorama M-500 'show system logdb-quota' This doesn't show me the retention of traffic, threat logs etc: user@PAN-PRI(primary-active)> show system logdb-quota Quotas:system: 25.00%, 17.755 GB Expiration-period: 0 daysconfig: 30.50%, 21.661 GB Expiration-period:...

Threat Map Clarificatiion

Are these threats that show up on the map active or stopped attacks? Is there any logs of what exactly happened?

VPN IPSec con 2 IP de destino diferentes, igual dominio de cifrado

Hola, Alguien sabe como puedo configurar una VPN IPSec con 2 IPs de destino diferentes y con dominio de cifrado igual, que cuando una de las VPN IPSec deje de funcionar la otra se active ?, es decir que una de las VPN IPSec estará en espera.

Resolved! PAN-OS 10.2 version log4j impact

If I access the log4j related link below, it is confirmed that it has been updated to PAN-OS 10.1 version. URL : https://security.paloaltonetworks.com/CVE-2021-44228 I would like to know if PAN-OS 10.2 is also affected by log4j. If anyone knows about this information, I would appreciate it if you could share it with me. Thanks in advance...

Dipp nat pool duration time

Dear Team, Any documentation or information regarding dipp nat pool duration time? I would like to know how much the previously allocated IP:Port is maintained. If anyone knows about this information, I would appreciate it if you could share it with me. Thanks in advance,Kyungjun,

Resolved! PA-820 Configurable HA Interfaces?

I'm looking at buying a pair of PA-820's. The intention is to have them in an Active/Passive setup. One thing I haven't been able to get a clear answer on though is if the predefined copper HA1/2 ports are the only option on the 820 or if any interface can be configured for HA. I've seen videos of the port configuration for other models.

Resolved! DynDNS client on PANOS 9.0

Hi, I'm trying to setup DynDNS based on the instructions found at https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/configure-dynamic-dns-for-firewall-interfaces.html I'm using DuckDNS, but I'm stuck at the 'certificate profile' portion. As I understand it correctly I have to import the (public) SSL certificate of DuckDNS, bu...

Delete MAC global protect agent from GP Portal

Hi, Is it possible to delete to dowload the GP Agent for MAC from GP portal???? We only want client for Windows in GP portal thanks

Resolved! AWS VM series 100

Hi I need to deploy Palo in active passive in AWS cloud I was planning to use vm 100 with C5 large instance type 1. Does this instance type only give 3 network interfaces max? Thanks

Resolved! URL Category - Real time detection

Can anyone explain what is the Real Time detection URL category? And what it does?

Resolved! PCNSE Exam Voucher

I am waiting for the offer to take my PCNSE Exam. When it would be, please confirm?

Resolved! Managment port flap

Dear Team, The mgmt port up/down phenomenon occurred from 00:07 to 00:08 on April 12. I analyzed the tech support file and I found below log in the ms.log. Is there any additional way I can check for cause analysis? ms.log2022-04-12 00:05:23.261 +0900 cmsa: peer watch. sock=50 curtime=2614507 recvtime=2614442 idx=0 proctime=2614442 sendtime=2614...

Question about Paloalto External Dynamic List

Hello all,I hope you are doing well : ) I recently received an EDL-related question from a customer, but I couldn't find an answer, so I want to ask for advice. The customer's configuration is the configuration set by the blacklist IP on the EDL However, the blacklist IP should be checked in the traffic log, but it can be checked in the treatmen...