Log-Collector Issue with 10.x to 10.x

Hi Community,

I have a strange situation, maybe someone can help:

Panorama on 10.0.6, Firewalls mostly on 9.1.x.

We onboarded the 1st 10.0.5/6 firewalls and noticed, that we don't receive any logs within our dedicated log collector.

The collector group

Unusual Issues in Hosted ESXI Environment

Hello folks,

Posting here as a final act of desperation. I am still pursuin the case with TAC, but I hope that perhaps someone will have seen something like this before.

Our network resides in a hosted ESXI environment provided by iLAND. We have an H

Redundant Static Route through two IPSec Tunnels

Hello All,

I am attempting to setup primary and backup route to the same IP through two different IPSec tunnels. I have attempted both PBF and Static Route Path Monitoring and cant seem to get either to work, in both cases is because there is no IP as

IPSec Version

For audit purposes we neeed to know if paloalto is using IPSec version 3 or version 2?

Issue with correct FTP application detection

Hello Everyone!

We have a pair of PA-5260 (Panos 9.1.4) between 2 security zones serving primarily the traffic to a file buffer.

About 90% of the traffic is FTP  with server side being a load balancer IP.

With a small fraction of traffic we experience

New LIVE AMA event, LIVEcommunity Team Roundtable!

If you are curious to know more about how the LIVEcommunity works, have a chance to chat with community team members, or ask a non-technical question?

Now’s your chance!

The floor is open for all you burning questions now through June 24.

T

Zone Protection CPS Calculations - Make ZERO sense

I have been collecting CPS (total, TCP, UDP, IP) via OIDs using PRTG for ~6 weeks.  I have all the data I need (I think).  However, the DoS Zone Protection best practice documentation leaves a LOT to be desired as it's not clear.

If anyone has tried

link aggregation in a switched LAN environment.

Dear paloatonetwork live community I have the following question related the above topic

• what are the operation of link aggregation in a switched LAN environment.
• what are the Ether Channel technology will be used to create link aggregation.
• what are t

Log Forwarding - are changes disruptive to PAN firewalls?

Hi Gang,

We need to update our log forwarding to now include Syslog. Previously they were only uploading to Panorama. It was also previously shared but we will need to make it device group specific now as we have local syslog servers for local sites.

Ransomware Prevention / Detection / Response Resources

There are many articles, guides, and resources available across various Palo Alto Networks properties to guide users on how to best protect their organizations from ransomware. After spending some time to find many of them, I thought I would share wi

SAML Captive Portal

Hi All,

i'm trying to configure a SAML authentication for captive portal but when i'm trying to export metadata and selecting captivel portal i'm not able to export, it shows no option:

if I try to type an address and click ok the file generated contai