This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Request for Documentation on VPN and Routing Log Events

Hello Everyone, I am looking for official or community documents that explain VPN and Routing system log events in detail on Palo Alto firewalls. Specifically, I’d like to: Understand the meaning of log events such as ikev2-nego-ike-start, ipsec-key-install, ikev2-recv-p2-delete, routed-BGP-peer-left-established, etc. See if there is a compl...

Resolved! About API keys when using the curl command

About API key issuanceWe understand that API keys are issued by executing the following curl command toward PA.curl -k -X GET 'https://<PA-Firewall-IP>/api/?type=keygen&user=<username>&password=<password> Regarding the issued API key, does a different API key get issued each time the command is executed?※Assuming that...

n-tomo by • L2 Linker
  • 3846 Views
  • 5 replies
  • 0 Likes

Device and customer codes do not match a Support Account. Please contact a Super User to send you a registration link

Hello Team, I am trying to register a PA-1410 device on the palo alto network support portal, but I'm running into follow issue. After I enter Device Serial Number / Sales Order Number its throwing below error. 'Device and customer codes do not match a Support Account. Please contact a Super User to send you a registration link for the app...

The PA-460 firewall is inaccessible due to severe latency

Hi Friends, 1) The PA-460 GUI takes a very long time to load, often more than 20 minutes, and sometimes the firewall becomes inaccessible due to severe latency2) We reviewed the software running status and restarted the management server process from the CLI, but the issue persists.3) As a next step, we restarted the web-backend and web-server...

TCP MSS

Below is the statement on MSS from PALO ALTO KB: The TCP MSS, the maximum segment size, is a parameter of the options field of the TCP header that specifies the largest amount of data, specified in bytes, that a computer or communications device can receive in a single TCP segment. It does not include the TCP header (20bytes) or the IP header (...

zwaza by • L0 Member
  • 1085 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama import devices with simi lar config

Hi, I have to import several FWs (branches) in Panorama. All the FW has similar config/object related to interfaces IP, objects, etc. It could be any issue in the device groups or templated if all branches have same same internal IP interface. I thought to create a template and Device Group unique for each branch. Thanks

BigPalo by • L4 Transporter
  • 1002 Views
  • 1 replies
  • 0 Likes

VPN Gateway fails to authenticate clients with new certificate uploaded

Dear all, We have a Palo Alto VPN gateway at our office, where our clients and customer’s Palo Alto connects to! Our certificate at one of our customers site has expired and the vpn connection is down and hence to the isp! Now I have generated a private key, using that I have generated a CSR sent the CSR to the CA and they have returned the ...

Replacing HA Hardware

Hi All, I need to replace 3220 in HA to 1420 in HA. - The 3220 running 11.1.3-h3 - I installed 11.1.3-h3 on the new 1420s. - Installed the same version of the apps and threats. - exported the running config from the 3220 - imported the config to the 1420 and ran a commit. I read that i cannot run the HA with different platforms. Is there a way...

SFP Compatibility

hello tech enthusiast, I want to connect a fiber cable between two PA firwalls, thats what i did but i have the interface down on both ends even, and i dont know what to put as a SFP Plus, when i run the command show system state filter sys.s1.p6.phy i have a vendor-part-number: SFP-10G-LR-PO but when i do that on a working interface a have v...

Can`t proceed to customer support portal

The first i created an account for Customer support portal and I'm Stock with this Your account is currently waiting for your company’s Super User Approval. Access will not be provided until this approval is received. To help speed things along, you must reach out to your Super User for approval.You can click here to send your Super User a rem...

VM Trial License

HiI am trying to obtain a TRIAL LICENSE for a VM. I am using EVE-NG and need to set up a training lab. I dont want to associate it with' our current Palo Altos. How can i go about obtaining one? Thanks

mzedalis by • L0 Member
  • 2098 Views
  • 3 replies
  • 0 Likes

Struggling to Unset Virtual Router from Interface via API – Manual Works, API Always Fails

Hi everyone, I’m working on automating Palo Alto firewall configuration via the API and I’ve run into a puzzling issue. What I’m Trying to Do: Unset the Virtual Router assigned to a specific Layer3 Ethernet interface (e.g., ae2.4008) using the API. Manually, I can easily go to the GUI and set the Virtual Router to none, and everything works ...

AK_20201 by • L0 Member
  • 681 Views
  • 0 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks