panorama Device template HA setting error

Hello,

I am getting an error pushing a template from panorama to a device as below

Details:

• . High-availability ha1 interface needs a prefix length(Module: ha_agent)
• . Commit failed
• Warnings:

This is related to a HA settings. However i have manually set

Decryption profile DECRYPT-CERT-VALIDATION traffic denied

NA

AD Server Showing "Connection Timed Out" So Captive Portal Redirection not working

Hi Team,

I am having an query regarding the Captive Portal issue. Herewith, I have network flow diagram to understand better on the scenario.

Network Schema:

**** Both end Firewall are of same device Palo Alto only.

=> From Head Office Firewall, we a

Panorama logging quotas

Does anyone know if you can configure logging quotas per device group(s) or firewall(s)

My panorama is running 9.02 in legacy mode.

Source user column not populating

Source user column is empty under the monitor tab - traffic logs. We have checked all the settings from our end and couldn't see anything wrong with that.

It was working before, no changes been made. Noticed it stopped working recently.
No proxy server

Global Protect N-FACTOR authentication

Hello,

I have the following question is it possible to assign multiple authentication profiles to globalprotect.  I wan't to accomplishg the following:

Users of LDAP GROUP X.:  Use LDAP authentication only.

Users of LDAP GROUP Y:  User RADIUS auth with

enabling interface ping

Hello,

We have a vlan.101 interface with profile permiting ping (ping service selected) enabled on it.

However, hosts on this vlan.101 cannot seem to ping this interface.

Arp entries of some of the hosts are seen.

Appreciate all help.

Thank you.

Default deny logging question

I notice that if a connection comes in and does not hit any policy correctly I do not see the deny in the logs. I think this is because the default behavior of the intrazone-default  rule is not to log anything. Is there a down side to setting this t

Traps configuration for VDI PVS enviroment

Hi everyone,

We are trying to configure Traps for VDI enviroment and we are having issues with the new images created. The VDI enviroment is a non persistent one, and we are using PVS for VDI.

All clients are created from a Vdisk, so there is no Gold

Skype SIP 5061 port allow

Hi,

I have Skype for Business Edge server, it has DMZ private IP and translated to Public NAT IP. This IP should open TCP-5061 Port to Internet and we opened. It seems traffic is passing correctly. But in real, when i do telnet test, it's fail.

It's no

the new versions are not shown in the panorama gui

Hello community

When I have to update my panorama to a new version I go to the software tab and I press the button. Check now they do not show me the new versions I only see the version that is installed in the panorama.

Is there any solution to sh

PA supports 802.1ad QinQ?

Hi,

I would like to know if PAs support 802.1ad (QinQ? any info about this?