General Topics

PA-3020 - Error: Threat database handler failed - Commit failed

Hello,

We have a PA-3020 running FW 7.1.24 on an end of life infrastructure to be shutdown by the end of year. This PA-3020 has no longer any subscriptions/support. We are in need to enable a Security Policy for a few hours and found we can't commit d

non digit error on PA 7050

non digit error after commit... please help

2 OSPF process

Dear Community,

I have 2 OSPF process on AsA, now I wont to replace Asa with PA, as I know PA only can run one OSPF process. Is it possible to solved this?

Thank you in advance.

Hiding Global Protect version

Hello ,

for one of our customer , they did some pentest and came back with a report that our Global Protect Portal shows the version of GP

They advised if is it possible to hide GP version info . 

When a user opens the GP Portal , version info is not

PBF Without Gateway

PBG without gateway

Good afternoon, is it possible to configure a PBF, without specifying the gateway IP address, just apply the outgoing interface and that's it? is this possible ?

I remain attentive, thank you very much.

Best regards

2 VM series HA Setup in Azure with ELB

Hi all,

I've setup 2 VM series in a sandwich topology and want to know the following in terms of the setup:

How to configure the 2 virtual routers being trust and untrust for the static routes that point to the ELB?

How to configure the NAT for outboun

Renewing a Subordinate CA Certificate for firewall, issued by MS Server Enterprise CA

Hi,

I've been looking all over for some guidance on this, without much joy.

I am trying to renew a subordinate-CA certificate on a firewall, that was issued by a Windows Server Enterprise CA.

Obviously there is no Renew function on the firewall for t

syslog server logs

Hello,

I am facing an issue to get the alerts for my syslog server ( description contains 'Syslog connection broken to server[\'AF_INET.127.0.0.1:2625.\']' )

every two hours I am getting alerts. i checked the sys-ng.log and took the packet capture bu

LAN to Portal/Gateway Externo same Firewall

Dear:

Good afternoon, is it possible from my LAN network, to connect via Global Protect, to the external portal/gateway of my Firewall ?

I tried, despite having the permissions at the policy level and it fails to establish a connection.

Is it strictly

URL Filtering override tab after upgrade.

I am planning to upgrade firewall cluster from 8.1.18->9.0.14->9.1.11.

9.0.x says override tab is removed.

Is it the case with 9.1.x as well?

I have lot of domains in override.

Slowness when filtering at destination in a rule by address-group

Hi,

We are having slowness in a traffic when the destination in the security rule is a address-group. If we configure "any" in destination the session are fast. The traffic is 443 (web-browsing).

How PA can cause slowness in https if the destination