General Topics

How Registration firewall to panorama?

Hello Guys. To register the Paloalto firewall in the panorama, I watched the video and copied it, but it failed. https://www.youtube.com/watch?v=UvtRuYE66DY I tried it the other way, but it failed the same way. https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/add-a-firewall-as-a-managed-device How do I regis...

Resolved! Change VR name

Hello, I have a 5250 with 3 Virtual Routers that talk with each other and one L3 switch via BGP. I have to change the name of one of the VRs, this activity generate outage on the BGP and/or the active sessions managed by the VR?I found these info:"What renaming a virtual router does in reality is deletes the router and readds one with the same c...

Watch SASE Converge 2022 On-Demand Now

Did you miss Palo Alto Networks' SASE Converge 2022 conference? It's not too late to hear from Palo Alto Networks leadership and industry experts talk about the latest trends and innovations in SASE: Watch SASE Converge 2022 on demand now!

Screen Shot 2022-09-20 at 1.04.53 PM.png

Resolved! Unable to resolve FQDN after upgrading PAN OS to 10.1.5 - " ping: unknown host FQDN"

Hi Every one, We have recently upgraded PA-820 to PA-OS 10.1.5. After that, we observed we cannot resolve any FQDN from the firewall. *. We have verified the DNS setting Device>Setup>Services> Primary as 8.8.8.8 and local. *. We have tested by changing the service route of DNS to LAN, WAN, and default and allowed complete access in pol...

Resolved! EDL and Auto Commit Fail

So the EDL ballooned at some point and was not checked beyond capacity of 220 PAs. Upgrade attempted from 9.1 to 10.1 When upgraded to 10.0 autocomit won't complete and give large EDL error. Firewall doesn't seem to make connection attempts to EDL hosting server, where IP's have been reduced to less than 10 to fix this. Auto commit won't finis...

Resolved! forward trust certificate

Hi, i have a requirement to do ssl inspection from traffic from 2 different security domains, i have imported CA and issuing certs from the different DC's etc, i have then created new 2 certs for the to be used as the forward trust certs, but when i click on the cert to select forward trust cert option, it seems I can only have one cert which is...

Resolved! Issue that specific policy traffic logs fail to forward to syslog server and drop from firewall

Hello,OS : 9.1.6Currently, my customer is facing Issues where logs generated (TO_DNS policy) from a specific policy of more than 10,000 LPS are dropped without being forwarded to the syslog server. The Traffic Log of the firewall is verifiable, but the Forwarding Stats Syslog Drop Count is constantly increasing, debug log-receiver statistics h...

스크린샷 2022-09-20 오전 11.52.58.png

IPSEC vsys cli

HiI configure IPsec tunnel.When I configure with manual on web interface, by default was adding vsys to Tunnel Interface--Virtual system.But when i configure with cli doesn't visible vsys(it visibles empty).which command i can used for adding vsys?

Upgrade Clarification from Documentation

I found a post on the forum that went inactive about a month ago stating if you are upgrading from 8.1. to 9.1 you should 1. Download 9.0.0 2. Install the Preferred 9.0.X release 3. Download 9.1.0 4. Install the Preferred 9.1.X release The documentation below states on Page 9 "For manual upgrades, you must install the base image for a featur...

Resolved! how to send maintaining message in global protect client

How to send message by global protect? Because i will upgrade the global protect client ,i want to send maintaining message by global protect to tell user.

Why is the notification "Globalprotect is running" shown on Android?

I'm using an Android device.It is not actually running, but it appears in the notification tray as running. The badge is also displayed in the app, but it is not connected to the VPN even after running the app.Why on earth is this? Badges bother me. It's very annoying. Please let me know the answer!

Urgent case : base image is deleted and can not download through internet and uploaded manually but not loaded

last week 95% root partition usage alarm, then I clear disk space last week deleted base image wrongly then i try to download again but failed in webthen today I power socket is unplugged and restarted, ethernet 1/1 not function uploaded manually 10.0.0 and 10.2.0 it show uploadedbut it can not load base image after restart, now ethernet 1/...

Global Protect disconnect after a remote desktop session

I am using Global Protect in the mode "User-login ( always-on)", how it is possible to not let the connection drop if remoting to the machine while the VPN is ON ? "even with same already logged in user"

Vwire

deploying PA-3250.. int 1/2 and 1/1 are configured as Vwire.. however, interfaces are showing down..

Memory in root partition

HI, We have a alarm about ocuppation in root partition. I tried to delete any files to release memory but there is not any "big files", no cores, no pcaps, just some logs. So how can i release memory for this partition? whats is a alarm value for this root? Filesystem Size Used Avail Use% Mounted on/dev/md3 3.8G 3.3G 314M 92% //dev/md5 7.6G 4.6G...

Discussions