Dynamic ports to Static

Hi Team,

I'm trying to configure the Dynamic ports (49152-655355) to static 37001 . We have destined server which is sending dynamic ports to establish the link and data exchange.

what is best option to have this hardening.?

URLfiltering Response page for Override with redirect mode does not work

I created a loopback interface that has the Response Page management option enabled. I setup up the override action for social-networks category in the URL filtering profile and setup the Device->Setup->Content-ID on override with the IP loopback add

How to get the full CA Issuer URL when it is truncated in the decryption log

Hi guys,

I am checking the decryption logs, to repair the certificate chain as mentioned in the guide below:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/decryption/troubleshoot-and-monitor-decryption/decryption-logs/repair-incomplete-ce

EVE-NG Setup & VMWare installation for Palo Alto & Multi vendor devices

VMWare installation & EVE NG Setup step by step for Multi Vendors Devices

As for every IP Network Engineer readiness of the simulator especially the multi-vendors environment, EVE-NG is a big headache. But honestly, this is very simple and only nee

PanOS 11.1.5 (and others with the fix for CVE-2024-2550) still not preferred?

Might anyone know why 11.1.5 and 10.2.10-h10 (or anything newer) are still not marked as preferred 3 months after release?

We're on 10.2.x now and likely would upgrade to 11.1.x, but I figured waiting for the patch for CVE-2024-2550 makes sense.

Two separate PA one the same ISP on both location

Hi, 

we have two PA fws around 1km in bettwen.

They are connected with dark fiber so users on both side can see each other.
One the same ISP on both side, and public IP address range of /28 addresses. 

We are using that public IP address for several s

natted public ip

Food for Thought - Data Redistribution during HA Failover - User-ID

Hi All, 

I thought I would share something that gave me grief this week. 

Background

• Firewall A and firewall B are in an HA pair. 
• Both firewalls are configured to connect to a User-ID agent sitting on a Windows host within the environment. 
• Firewa

Demo Lab Environments - No Longer Available

I was going to review some Panorama setting options in the demo environment and the demo environment is no longer available. Did Palo Alto decommission these labs and was there any communication about it? If so, can anyone provide the communication?

Verify and test backup firewall

Hello 

How we can verify and test the backup file ?