General Topics

Palo Alto Configuration Change

Hi,

Long time lurker here.

I need some directions with a project I am preparing.

The project adapts the way we communicate with the internet. This means preparing PBF rules, NAT rules, quite some objects(100+) and groups (10+) and also adapting the way

PAN-OS 9.16 SMB Issues - mapped network drives.

Hello all,

Please be advised, there is a current issue with PAN-OS 9.1.6 which seems to break anything SMB related, e.g. mapped network drives. Sessions have an end reason of "incomplete" and go into state "aged out" in the session table.

After doing

FQDN security in policy

Hi All, I am quite new to palo alto. can anyone explain me what happened if we configured object as a FQDN, IP and URL..I have created one security policy where I have implemented destination as a FQDN (nslookup results into 1 IP address) but user is

QoS and IPSec

Hi All,

I would like to enable QoS on an IPSec tunnel. The tunnel is carrying mostly voice and signalling traffic.

If the voice traffic has a marking, eg EF, will this marking be copied to the outer IP header (the IPSec tunnel header)?

Or, will I have

After Apply SELF-SIGNED ECDSA CERTIFICATE IN SSL/TLS PROFILE Cannot Access to Management Interface

I have a HA Firewall Active/Passive. Due to certificate is already expired I have exactly follow below guide to create my Self Sign ECDSA Certificate and apply it to my Passive firewall. The issue is when the passive firewall is in HA mode that time

Auto Scailing PA VM Series on AWS without Panorama

Hi everyone,

Currently, I'm trying to design an auto scailing with VMSeries on AWS.

The official template from PA is required with Panorama.

Anyone have a suggestion with ASG & Warm pools for VMSeries without Panorama?

PA Firewall Performance Chart

WMI On server 2022 for USER-ID

Hi There,

Have a pair of PA-3220s. User-ID was working swimmingly. Recently upgraded our DCs to Windows Server 2022 and WMI is routinely failing and showing "Not connected" under server monitor.

Doing some reading on WMI and Server 2022, and it sound

PA-5200 MIB file for SNMPv3 need them for monitoring

PA-5200 MIB file for SNMPv3 I need them for monitoring I find them here:

https://docs.paloaltonetworks.com/resources/snmp-mib-files.html

but the file type is .md5 and .my, but I need file type .mib or .smi to work in the monitoring software.

Where I ca

Bulk way to search logs for many IPs?

I have a list of over a 100 IP addresses that I would like to search logs to see if there has been any activity. Is there a way to search the logs files by feeding the FW a file containing the IP addresses? Thank you.