Feature Request: ECMP Path Monitoring

We are currently using ECMP to load balance to our two ISPs. Which works great. However since there is no path monitoring(Unless you set static routes). If something happens upstream and your peer doesn't go down the PANs will happily keep sending da

Panorama Pre and post rules

Pre rules post rules in panorama of palo alto firewall 1..if post rules and pre rules have already configured in panorama and then  we add another palo alto 2 in panorama which has post and pre rules as well which one it will select ?|
Does pre rules

Activity Locked on Beacon

PaloAlto firewall HA upgrade

Hi

I am new to Palo Alto firewalls. I need to upgrade the firmware on PA-3220 firewalls in A-P HA . Firewalls doesn't have management ports connected to network and they are remote. It looks like i need management port access of individual firewall t

existing session behavior when routing table changes

Does anybody know if existing sessions can be updated when there is a routing table change, or if there is a way to clear sessions?  I'm hoping for something analagous to the Session Rematch feature when policies change.

My problem is that I have a

Need to check comptibility

Hello Team,

We have PA-5420 firewall having 10Gig port. but downlink on cisco switch we have 25Gig port. if that is the situation then it will work or not.

When setting up HA from a stand-alone...how should I configure LAN ports on the switch? What state are links on the passive node?

Seeing alot of drops on incoming interface to palo, trying to understand if this is normal.

New to palo's.  I did search the topics and didnt find anything.

Is it normal to see drop on the incoming interface to the firewall?  Are the drops caused by policy?

Also, what is a drop from flow state check?

packets dropped 69498455
packets droppe

Prove the firewall innocent?

Hello,

We have communication from load balancer to 2 servers called S1 and S2.

Both S1 and S2 have same Windows Server version and have exact same patch level.

Both serve a web-service hosted on their IIS.

On Palo firewall, we have App-ID based rule

Device and customer codes do not match a Support Account.

Hi,

I recently acquired a used Palo Alto firewall and I'm encountering an issue during the registration process. The error message states: 'Device and customer codes do not match a Support Account. Please contact a Super User to send you a registrati

Forced VPN Connection with GlobalProtect

Is it possible to force a VPN Connection so the client can only use wifi or ethernet if he is in the office or has a active VPN Connection?