Unable to see IPSEC tunnel IP in trace

Unable to see IPSEC tunnel IP in trace.

IPsec tunnels have tunnel interface where the IP is configured. 

Peer1  - PA 

Host 1 - behind PA

Peer2 -  Other vendor

Host 2 - behind Peer2

Host 2 trace to HOst1 , can see Ipsec tunnel IPs in trace,

when

Single vpc with Igw, alb, gwlb and Apache servers. Not working

I followed the directions to a T. Ingress route on Igw, pointing towards the subnets defined in alb. Gwlbe subnet with default route to igw, default route on alb subnet to gwlbe, app subnet with default route to gwlbe. end points defined, gwlb with h

Cloud NGFW vs VM series FW

Hi

I need to replace the current Azure firewall with Palo Alto firewall in Azure cloud.  Which type of firewall I need to consider between cloud NGFW and VM Series FW? What are the differences between these two?

Thanks

Recommended PAN OS for PA-1410

Please share the recommended PAN OS for PA-1410 .

Second backup endpoint for IPSEC tunnel

How do I best configure a backup IPSEC endpoint in an IPSEC tunnel if the primary endpoint goes down?

NOTE : Palo Alto on both sides

Increase disk space on Panorama VM in Azure

Hi All,

We have a Panorama VM in Azure running pan-os 10.1.10-h2

the Root partition sitting at close to 100% and tried all the recommendations to clear space but not much luck thusfar.

partition is 7.5GB size.

PAN-212530 addressed this issue  on 10

OOM crash and HA swapping with 10.2.10

Has anyone experienced out-of-memory freeze and repeated swapping between primary and secondary HA pairs? We just had our PA-3420 freeze and stop passing traffic, followed by multiple HA swaps, followed by the same again 30min later.

There was a ho

STUN Application

Howdy Folks, 

Trying to learn more about the STUN application. Wondering if any other enterprises are allowing this application.  I know the applipedia says its not high risk but it also seems like it uses a variety of ports. Don't know much about

Automation / API - Register and de-register devices to log-collector group

I am looking for a way to automatically register and de-register a newly created firewall to a specific log-collector group. I had hoped to achieve this with https://github.com/PaloAltoNetworks/pan-os-python but I struggle translating the xml path to

ECMP - Weighted Round Robin > Ping Loss

Hi

MODEL : PA-1410

Version : 11.1.2-h3

ISP1 : 10G

ISP2 : 1G

When setting Weight Round Robin, external interface and ISP1, ISP2 ping loss occurs.

I don't know why.

please help me

can't export BPA file

 Hi every one,

I need export BPA file, so I follow guide link https://docs.paloaltonetworks.com/strata-cloud-manager/getting-started/dashboards/on-demand-bpa-report

LDAP auth not working for Palo login

Hi all,

I have deployed a new Palo and configured LDAP auth but I am getting an error. I checked the BIND account is active and all settings appear ok, anything else to troubleshoot this?

Reason: Internal error, e.g. network connection, DNS failure o