Dear Team, We Have PA Firewall With Single ISP and Peer End Sophos FW With Dual ISP. Here I need to configure VPN Fail over. What are the step i need done PA side? RegardsKarthikeyan
Hi All, I have HA firewall PA1 and P2. PA1 is fine but on PA2 having this issue with failed installation antivirus. although it failed for the 1st minutes and PA2 success on 2nd minutes i need to know or some explanation why its failed on the first place. any advise or suggestion are very much appreciated i share the below system logs...
what is the max session limit for SSL decryption on PA-5220 box?Thanks.
Hello. Why I can't bound a static IP manually on web-management as Object-Addreses and when type ip netmask as xxx.yyy.zzz.xxx/25 from internal trusted zone? Even I created management profile for that interface called ping with switched on ping. Nevertheless there is no ping. I know exactly MAC address from ESXi and web-management so it is true....
What is the current recommended version of OS for PA3420?
Hello. Week ago friend of mine gave me an old PA-500 w/o license and subscrption. Software Version 6.0.2 Since I had no admin pass therefore device was factory reseted. As Internet firewall device work fine now. Do somebody know is it possible to make up SSL VPN outside connection with such conditions? Thanks in advance!
We would like to have the possibility to run 3 PA-VMs in a lab environment for training, testing and education purposes. We reached out to our reseller and they told us, that we have these options: 1. "normal credits" (~7000 €) 2. PAN-SOFTWARE-NGFW-LAB with minimum of 500 Credits that we have to purchase (~12.000 €) We would only need about 45 c...
Hi there, I have a use case where i need to import the incident file from one XSOAR to another XSOAR, in different environments, using PLAYBOOKS. Is there anyone who can advise if this is possible, and if so what are the steps needed?
Hello, I need to implement a static route monitoring where route A with metric 5 is only applied if google is reachable, route B with metric 10 is backup link through WAN, and both routes are on VR default. I have another VR, Apps VR, where I need to make sure the default route (0.0.0.0) in this VR also has a static route monitoring where if Int...
Hi, I just configured split tunneling by domain using this domain test: *.portal.microsoft.com (port 443) But i can not see this traffic going into the tunnel. how can i tshooting this? thanks
the customer firewall pa3220,version :10.2.1, the mgt interface could not access internet,so that firewall could not upgrade the url database.but the system log dispaly some high log:url-cloud-connect-failure,the customer want don't see these log.first solution：delete the PAN_DB_URL_Filtering keyAre there any good other solutions？
how to block mkv mov mp3 mp4 mpeg msi torrent apk avi avi-divx avi-xvid-this type of format file block
Hi, i would like to customize the URL Authentication complete in GP. i was checking this KB: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/customizing-the-saml-cas-acs-landing-page The problem is that we dont have the option: ...
We are currently experiencing a significant increase in bandwidth consumption on our network due to users downloading .crx3 files, which are Chrome extension packages. Our Palo Alto Firewall does not natively recognize or allow us to block the .crx3 file type using the File Blocking profile, as this file extension is not currently supported in t...
Unable to connect in mac mini 06/29/2025 12:07:37:787 [Info ]: Started the Portal pre-login06/29/2025 12:07:37:787 [Info ]: CPanMSService::PreloginPortal CheckServerCert return 0x2000 06/29/2025 12:07:38:055 [Info ]: Portal pre-login result received06/29/2025 12:07:38:057 [Info ]: Portal Login starts06/29/2025 12:07:38:057 [Info ]: Failed to o...
Raido_Rattameis
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
