With the new hardware rolling out, is there a new document that shows which SFPs are compatible with which FWs
I would like to know some details about DDNS over pppoe. That feature was not available in 9.1.x series below is the document i chedked. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/dynamic-dns-overview.html However, when I check the same docs in 10.0.x series that is available. https://docs.paloaltonetworks.com/pan-os...
Hi ExpertsThe client is reporting Latency/Jitter when making the phone calls which is traversing through the PA firewalls 5220. We've QOS policy configured for the RTP/SIP applications (User/Zone is set to 'any') with Class 1(real-time) . Also, we've configured a Guaranteed Egress of 5000Mbps for this Class1 traffic under QOS profile which is ap...
Hi,Currently Panorama is in Legacy mode, there 5 devices connected to it, 2 in 2 data centres, one at an office. Templates are configured and synced across devices including device specific templates (like configs and other device management configs). However due to the logging limitations we need to change to Panorama mode. The other temporary ...
If I execute the command 'show system raid detail' on my m500 log servers I see the status of the disk pair toggling between active and clean. I am wondering why it would doe this. Is this normal? admin@LOG01> show system raid detailDisk Pair A AvailableStatus activeDisk id A1 Presentmodel : ST2000NX0253size : 1907729 MBstatus : active syncDi...
Hi All,One of our customers has blocked the 'Music' category in URL Filtering but when we filter the 'Music' Category in ACC, it shows total bytes for the last 7 days as 5 GB. So what do bytes really represent? Why does it show 5 GB when the category is blocked? Please explain this in detail.Regards,Hiren
Hi all, I want to renew the expiration date of the certificates for my globalprotect devices. The firewall is the CA that issued the certificates. My question is whether I have to export and import the certificates after renewing them by following the steps on this article: https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/cer...
Hi all, I searched all the documents available for Palo 5220 (performance datasheet, PANOS admin guide etc) but i cannot seem to find anywhere specified the SSL-VPN throughput...only the maximum number of SSL-VPN tunnels. Is there anyway or maybe a document where I can find this parameter? I need this for writing a technical proposal to a client...
I encountered a problem installing the machine certificate.I followed the article below:https://live.paloaltonetworks.com/t5/news/globalprotect-pre-logon-authentication/ta-p/322237 We are using a self-signed root ca that is in the cert profile for auth, then generated the server cert and machine cert and signed them with the same root. Then expo...
We have two Aruba wireless controllers in a master / secondary configuration. Each one has a trunk port which contains about a dozen VLANs with our guest wireless traffic. The VLANs are arbitrarily assigned to the trunk ports by the controllers and can change depending on network conditions (from what I understand). The PA-220 is the gateway ...
I recently purchased a PA-200 for my home lab and it's running PAN-OS 8.0. Is it possible to purchase support so that I can update this device to the latest version of PAN which this device can run? Thanks.
Hello! I'm studying the PCNSA, may I ask you a question about a security policy?The "it" group in that policy could be a Radius group imported on the FW?Or could be a way to map users to group? PS:it would be very useful if Palo Alto offered a free VM lab to test which we are learning, anyone know if it's already been provided? Many thanksAle
We've been trying to redirect the decrypted port mirror traffic to a remote sever in the network.If we plug a notebook into the decrytp port mirror of Palo Alto, we see all the decrypted traffic in Wireshark.So, we tried to connect PA port into a switch and use Cisco RSPAN to send the traffic to our remote Server. It just doesn't work.I may be f...
Hi all, I'm confused as to what the difference is between the "VLAN" tab under "Interfaces" in "Network and the "VLANs" section in the sidebar in "Network"? My goal is to create a couple of different VLANs for a network where certain traffic has to be segmented from other traffic. All of my ports are operating on L3. Thanks!
We are told that the clientless apps only works with HTTP/HTTPS based apps, and therefore we cannot use it to allow MS remote desktop. This is the problem I am trying to solve. Our users currently use their own computers at home. They connect to the corporate network using Global Protect, but of course this could be a security risk if one of th...
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
