General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Migration without Expedition

Hello

If I wanted to migrate from Checkpoint to Palo with Panorama, but not use Expedition, what would be the general steps?

 

Thank you for your time.

Configure HA1/HA2 command line

Need to configure the following in CLI:

Control Link (HA1)

Port ha1-a

 

Control Link (HA1 Backup)
Port ha1-b
 
Data Link (HA2)
Port ethernet1/1
 
Data Link (HA2 Backup)
Port ethernet1/2
 
Any insight would be appreciated.

PA-5250 Power Supply Question

Do the power supplies within the PA-5250 load share? This is probably a real simple question but I have not found an answer within the documentation yet?

 

Thanks!

B_Turner by L0 Member
  • 1571 Views
  • 1 replies
  • 0 Likes

Error Adding Git Repo To MineMeld

When trying to add the Palo Alto git repo as a git extension https://github.com/PaloAltoNetworks/minemeld-taxii-ng.git in MineMeld, The message "ERROR ACCESSING GIT REPO: Error running git: fatal: unable to access 'https://github.com/PaloAltoNetworks

...

JTSmiley by L0 Member
  • 1288 Views
  • 0 replies
  • 0 Likes

Resolved! import device state order

Hi,

I've done this successfully in the past, but cannot remember the proper order.   I have a PA-200 that I want to replace with a PA-220.  The PA-220 is in Panorama, its a device group + template.

 

Should I

1) configure the PA-220 with basic ip connect

...

ce1028 by L4 Transporter
  • 8696 Views
  • 12 replies
  • 0 Likes

PAN-DB URL Version Remains 0000.00.00.000

The firewall is running 9.1.4 (5250).  The mgmt interface does not have general internet access so service routes have been configured for the following to use the external interface (internet connected):

 

DNS

EDL

NTP

Palo Alto Networks Services

URL Updat

...

jlieberman_0-1600970729070.png

Resolved! Palo Alto LACP to Nexus

Hi all, 

 

I have an upcoming deployment and I need your inputs here. I will be replacing a fire that is configured in HA Pair with a PA-3220 non HA pair. 

 

The core switch of the client is configured as a active-passive (NX-OS). My concern is, can I en

...

difference between nego-fail and lacp-up event

Multiple logs are generated for LACP on passive firewall , but not sure whether this event generated due to layer 1 issue or config issue at switch end. We never faced this king of issue , this log are generated all of a sudden on passive firewall. 

L

...

Deepak_K_0-1601271762681.png
Deepak_K_1-1601271790244.png
Deepak_K by L3 Networker
  • 2565 Views
  • 1 replies
  • 0 Likes

Expressway-E and C and NAT

I am putting in a Jabber system using Expressway-E and C. My Expressway-E server is NAT'd through the PA-3020 and I have a security rule set up to allow the required ports in on the Public address. If I make a call IN from an external Jabber client i

...

Resolved! Firmware Updation A-P

Hi Guys, 

 

We have to upgrade firmware of our PA FWs in Active-passive Cluster (It's first time). Referred some online available documents to get familiar with upgradation process but all of them have difference at certain steps (I mean they are not u

...

Jimmy20 by L2 Linker
  • 3339 Views
  • 7 replies
  • 0 Likes

Resolved! Access Denied to Learning Articles

Hi, 

How do I get access to below link?

https://live.paloaltonetworks.com/t5/learning-articles/packet-flow-sequence-in-pan-os/ta-p/56081

 

I usually get below message when I try to access learning articles on PA. I'm registered as a customer. Any ideas p

...

Active-Passive Cluster Link & Path Monitoring

Hi All, 

 

Referring my prior discussion Subject - "Firmware Updation A-P" , We have below configuration enabled on Link & path monitoring configuration at this moment, have a look on screen shot.

 

Will this be sufficient to trigger auto failover to Pas

...

Link and Path Monitoring Screen Shot.jpg
Jimmy20 by L2 Linker
  • 1603 Views
  • 2 replies
  • 0 Likes

How to allow NTP ONLY to pool.ntp.org

I have a requirement to allow the internal NTP servers to sync with ONLY US.pool.ntp.org.  I have tried creating the rule 2 different ways.

  1. Create a address object using FQDN for us.pool.ntp.org and use that in the rule destination.
    1. This doesn't work a
...