Local policy to panorama

Hi,

We have a customer using panorama to manage few clusters.

For one of the location , they have just added the firewall to panorama .

So we have to load the firewall to panorama and then it shows the local config like policy nat etc 

It is same like

Convert traditional 820 firewall to ZTP

Hi,

Is it possible to redeploy a pair of 820 firewalls and convert those firewalls to the ZTP model?

Testing during Palo Alto 3000 cluster upgrade from 8.1.15-h3 to 9.1.11

Hello,

I would like to know if an upgrade that traverses multiple major versions requires testing after an upgrade to each major version?

Our upgrade path is:  8.1.15-h3 -> 8.1.20 -> 9.0 -> 9.0.14 -> 9.1 -> 9.1.11

Ideally, we would only upgrade one a

PA L2 interface ARP problem

Hi,

I have a PA with two switches connected to the PA via L2 interface, in trunk. The same switches have a trunk between them.

PA---SW1

|          |

SW2--|

So far so good, STP works and the network is stable. If one of the links between switch and PA f

QOS on tunnel interface

 Hello Bro,

               We are in process to configure QOS rules to control SMB over VPN.

The tunnel interface can't be set as a destination interface, does that mean to use the interface that serving the tunnel?

if I use the interface as the destina

PA3020 Replacement

I am planning to replace my HA pair of 3020 with PA-460s...what are you thoughts on this? I feel like the 460s are for branch offices and not data center although the specs are better or similar to 3020...they don't support LACP and they don't have d

PA-3020 - Error: Threat database handler failed - Commit failed

Hello,

We have a PA-3020 running FW 7.1.24 on an end of life infrastructure to be shutdown by the end of year. This PA-3020 has no longer any subscriptions/support. We are in need to enable a Security Policy for a few hours and found we can't commit d

non digit error on PA 7050

non digit error after commit... please help

2 OSPF process

Dear Community,

I have 2 OSPF process on AsA, now I wont to replace Asa with PA, as I know PA only can run one OSPF process. Is it possible to solved this?

Thank you in advance.

Hiding Global Protect version

Hello ,

for one of our customer , they did some pentest and came back with a report that our Global Protect Portal shows the version of GP

They advised if is it possible to hide GP version info . 

When a user opens the GP Portal , version info is not