Hello, everyone, I'm new to PA, I want to know if PA supports proxy protocol v1 or v2? We need to parse the traffic from nginx. Thanks!
Where do I find the deal registation link?
Previously it was mentioned that 10.2.12-h6 was the latest stable version. In light of the new CVEs and the recommendations that come with it, can I verify that 10.2.13-h5 is the new stable version?
Hi, I would like to customize portal web GP. The main web where you add your credentials and the enxt web where you can download the client. Is that possible? I saw you can import web for portal GP web in DEVICE-> Response pages, but i would need the current web to edit and customize where can i get it? On the another hand, Is it possible...
Hi, I would like to inquire if there’s any option to convert my PCDRA exam voucher into a voucher for a different but related certification exam. I currently have a PCDRA voucher, but since the PCDRA exam appears to have been retired, I’m unsure how to proceed or make use of this unused voucher. Any suggestions or guidance on this matter would b...
Dear all We need to replace our old ldap server config to a new ldap server on PA firewall and panorama, I want to know if I add a new ldap server config on PA firewall and panorama, how can I test the healthy of the new ldap server? I try to use telnet command to connect the new ldap server's 636 or 389 port, but I found there is no tel...
We did a trial of DNS Security, after its expiration pushes from Panorama failed with warning "No Valid DNS Security License" Did a fair bit of searching, only real suggestion was here, that said to set all DNS Policies to Allow, that did not resolve the warning. Tried setting DNS Signatures to Default, still same commit warning. Poking around...
The term "base" makes this impossible to search for because "application-based" and "port-based" shwo up everywhere. I am not finding an answer in any documentation yet. So, please help me clarify. If I specify the application to be one with the suffix "-base" does that mean it includes all the specializations, or does it mean it is only includi...
Hi, I had an unexpected situation occur recently with regards to failover behavior on static route path monitoring. We have 3 ISPs, and this past weekend 2 of them went down at different times (hooray). For the purposes of this post, I will be talking about one of them. Interestingly, the path-monitoring worked when the failure event occurred - ...
Hello, i'm having a weird problem with an IPSec VPN on my Palo Alto. This morning tunnel was working fine, but after mistakenly denying ike and ipsec requests on my firewall, the VPN went down. I obviously did a quick rollback and peer IP is now allowed to request IPSec and IKE. However the VPN won't go up again (other VPN with similar con...
Hello,I've been unable to get my HIP check to work when checking for attributes in a machine certificate. Other HIP checks do work. I'm using my root cert for the Certificate Profile. I don't have/use a intermediate cert as this is a lab. Some of the things I've tried.1. I configured a certificate profile with the root cert.2. Portal > Ag...
I have a bunch of PA440s and some of them cannot be upgraded as I keep getting an "An active license is required for this feature" message when clicking on Check Now under Device > Software. Device is correctly licensed and activated on the support portal, NTP is activated and sync'd. Dynamic Updates can be retrieved from the Cloud but PAN-OS...
Hi Friends, We have a customer experiencing issues with QoS. After enabling QoS, a noticeable reduction in internet bandwidth was observed. Although QoS was configured correctly, the bandwidth dropped from 25 Mbps to 14 Mbps on a 30 Mbps link.To test this further, we removed the QoS configuration and performed a speed test using an online tool...
Hi Team, if we create extra virtual routers does it impact CPU/RAM utilization i paloalto?Also do we need manually assign CPU/RAM allocation for newly creating virtual routers in paloalto ?
We recently installed the terminal server agent onto our Citrix environment. As soon as I installed it, we had reports that users were unable to launch our VoIP software called Avaya One-X Communicator. It crashes immediately after launching it. As soon as I disable the PAN Terminal Server Agent service users are able to launch it without issue....
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
