Hi Team, We have already used one interface for RP can we use one more interface to configure RP ??please find below snapshor for reference
I am using Powershell to make API requests to Panorama which cause various commands to be executed on specific NGFWs. I would like to do a commit-all to a specific firewall, not the entire DG/template stack. The documentation Commit-All (paloaltonetworks.com) lists the following command:curl -X GET "https://<panorama>/api/?key=apikey&t...
Hi,I bought a PA-200 new many years ago but support long expired on it. I've been using it simply as a home office firewall since then and have never upgraded PANOS so it's at 4.1.6. Honestly it's running fine, but the old SSL version is forcing me to use old browsers now and really it needs to be upgraded.PA only shows firmware back to versio...
Hello I have several questions to ask you about the user ID.1)We say that the LDAP does not map between the ip and the user, so who does the mapping between the ip and the user name? 2) then, when we configure the mapping of group. I do not understand the mapping of group in what it consists? To associate the name of the user and his ip or to ...
Hi, A question regarding HIP notifications. I have enabled HIP notifications for GP clients connecting in and they trigger when a violation of the HIP profile is detected e.g. firewall turned off, but just wanted to clarify something in the Palo documentation. Palo documentation below seems to indicate that the HIP profile needs to be attached ...
Hello , I have multiple firewall with running PAN-OS 9.1.11 and above version.i am facing an issue to generate XML output command of ARP managment. When i run the ARP managment command to set XML output on i am getting the below error:- admin@PA-VM-Passive> set cli op-command-xml-output on admin@PA-VM-Passive> show arp management Server er...
Hello , we have a customer who renewed the premium partner support When we go to License tab , we can see Premium Partner support renewed But when i go to Support Tab, it still shows date of 2020 Is it cosmetic ? We already tried to fetch the license via cli but same status on support TAB
Anybody know how to configure gre over ipsec ?from the 9.0,pa support gre tunnel and only one word describe about this feature.(Optional) Select Add GRE Encapsulation to enable GRE over IPSec.Add GRE encapsulation in cases where the remote endpoint requires traffic to be encapsulated within a GRE tunnel before IPSec encrypts the traffic. For exa...
I'm running PAN-OS 10.1 on a VM-100. I have DHCP on an interface and use a script to update an address object with the default gateway from the DHCP interface. I have a static route with next hop set to this address object and path monitoring enabled. I've run into a situation where if the DHCP lease expires (something upstream fails with the pr...
Hi all, We are using tunnel monitor on the IPSec tunnels and i am wondering if rekeying childs SA, causes the tunnel monitor to bring the tunnel down. In additon i would like to know if PA stores a log of all the rekeys for each tunnel. TIA
Hi folks, I'm facing some throughput issues with a site to site vpn between my onprem site (vm-300) and azure (VpnGw1).Scenario:- Windows cluster + SQL Always on Availability Groups (async commit)- 2 nodes on premises (sql01 and sql02)- 1 node on azure (sql03).- Link speed 150Mbps- Latency between on prem and azure: 15ms Ipsec tunnel is working,...
Does anyone know whether PanOS 9.1.11-h2 runs on PA-3020? I have upgrade PanOS on PA-3020 to 9.1.11-h2, and the PA-3020 now cannot drive physical ethernet interface except for a management interface. When I downgraded to PanOS 9.0.14-h3 or 8.1.20-h1, it came back to work again. Here is a little debug out: hoge@fw02> show interface hardware S...
Hi everyone, Hope everyone is doing Great. I have one question regarding the shared objects and here is the problem I am facing. I am trying to find the best way to convert device specific objects(addresses, services, tags) into shared objects. I was using Expedition to convert around 9300 objects into shared with the help of multi edit feature...
How Palo alto HA and Cisco HSRP work together ? For example ===========Here Palo alto HA is upstream devices ( lets consider PA1 and PA2 are in HA setup). Cisco Switches are catalyst 6509 or nexus 5 or 6K ( SW1 and SW2)SW1 is connected to PA 1 and SW2 is connected to PA2 in SW1 and SW2 HSRP is configured to maintain gateway high availability for...
OtakarKlier
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
OtakarKlier
on:
Network wifi Management
