XFF Value 1.1.1.1 when "Strip X-Forwarded-For Header" enabled

Hello,

Looking for some help if possible?

Trying to set up XFF (PA-3250, 8.1.12), I have tried to set it up following this tutorial:

https://live.paloaltonetworks.com/t5/General-Topics/Configuring-XFF-logging-without-a-URL-Filtering-License/td-p/23998

remove disk fromPAN 3220

I need the process of how to remove the hard drive from a PAN 3220 since I cannot enter maintenance mode and before doing the RMA for the firewall, I must clean the disk

Panorama: config output on CLI

Hi,

I would like to backup and restore a panorama like I can with the firewall, on the firewall i set "set cli op-command-xml-output on" and get the config via the console, then bootstrap the firewall to restore the config...
now i am wondering how I c

ALLOW ACCESS TO EMBEDDED YOUTUBE VIDEOS AND BLOCK OTHERS?

I found this article "https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClikCAC&lang=en_US"

Apparently they took the "Overrides" tab off and I don't know where to look.

sensitive information in PA 3200

I have a firewall  PA 3220 to send by RMA to Palo ALto , but first, the client wants to make sure that he has no sensitive information inside, can someone tell me if this is the case or what should be done for the return of the equipment without expo

Help needed with pruning ikemgr.log outputs to show only interesting traffic log entries

On Palo Alto CLI the only way I know of to see the logs of VPN tunnel Phase I errors etc is this command from inside the vsys via CLI where the VPN tunnel is built:

less mp-log ikemgr.log 

1) Are there commands for CLI where I can show just outputs f

Can PAN-OS 9.0 prevent user upload file size?

I want to limit the file size user can upload,for example prevent user from upload file larger than 100MB ,Less than 100MB can upload.

Tried but failed.
https://live.paloaltonetworks.com/t5/Management-Articles/Limiting-File-Size-Upload-using-Custom-S

tunnel monitor with VPN tunnel in passive mode

Hello community,

Do you think if having tunnel monitor for an IPSec tunnel in passive mode makes any benefit?

When tunnel monitor detects tunnel down, the firewall would attempt to accelerate the recovery by negotiating new IPSec keys. If firewall in

Traffic over IPSEC slower than usual

Hello, Recently we have been facing issues where traffic over IPSEC tunnel towards AWS is very slow. when downloading a file ( over SCP) getting less than 100KB/s from a resource in AWS over ipsec tunnel.  Didn't had this issues for months but it sta

Why can't I connect to Palo Alto Firewall VM on Debian?