Group Based network policy not being blocked.

Hello,

I have an openldap server setup as well as an LDAP policy and group mapping on the Palo Alto firewall.

When I run the 'show user group name "cn=employees,ou=groups,dc=brillnet,dc=com". I can see the users in the group just fine. Refer to t

Star topology through external zones (routing among multiple vSys; inter vSys routing)

Short description of the situation: We run several vSys on one physical firewall and each vSys has its own virtual router. We have a star topology, so there is one special vSys in the middle of all traffic (let's call it vCE - like Central), and all

Unable to add virtual disk to Panorama

Hello,

We are running Panorama VM release 8.1.8 un Panorama mode.

We have a 2 TB disk for logging and we would like to add a second 2 TB disk.

The new virtual disk has been added to the VM, and after reboot is seen as sdb in Panorama (sdc is already wo

Setting up portchannel from router to a pair of PA

Hi Guys,

I have a pair of PA5220s and a Cisco router ASR1001. I want to set up a port channel on the router and then spread the interfaces between 2 PAs. Each interface on the PA is set for virtual wire. I have done port channels between Cisco rout

Individual certificate for per GP VPN users

Unable to ping website, getting this site can't be reached

Hello, 

I'm a novice so I could use any help, RTFM, just point me in the right direction. I currently having an issue getting to a vendor site, can't ping the website or view the page. But from outside of our organization, it page comes up just fine

Palo Alto HA running config not synchronized .

Can you advice how to resolve this issues?

Fast boot PA-450

I have a firewall that for some reason after doing a version update to 11.1 is only taking 2 to 3 min to boot now. I noticed all the logs were not showing up and the interfaces was showing down, but everything was working. I decided to do a factory r

panorama commit shows 0% but commit is on the device already

I have a really funny issue here. 
I have panorama for managing all my firewalls, spread across the world. 
I did a change for our London firewalls and hit "push and commit" on panorama. 
The queue shows 0% progress, I waited half an hour, restarted pan

Interface down due to internet down

Hi,

my PA220 interfaces were down due to internet connection is down. As the internet connection was up, the interfaces also showing UP. Why is this happening. is there any settings for this to check.

PCNSE certification, how to get an online training fully covering all the possible questions

Am confused by the amount of training available online. basically i want to get pcnse certification as fast as possible. how to do?