PAN-OS Upgrade

We're planning to upgrade the PAN-OS from 9.0.6 to 9.1.X version.Which is the stable 9.1.x version?

Thank you. 

set readonly commands

Found a bunch of config lines as such. Where/how? Can't delete them. They don't appear in the GUI. 

set readonly device-group grpname address-group NAME_LAN_GRP id 289
set readonly device-group grpname address-group NAME_LAN_GRP id 290
set readonly dev

Force GlobalProtect client to only apply to 1 of 2 ethernet connections

I have 2 physical ethernet ports on my Windows PC. 1 is for external internet and connecting to work VPN. The other is for a local-only ethernet network. When I connect to my office VPN via GlobalProtect, I lose access to the devices on my local-only

Panorama space issue

8.1.0 is 782MB and 8.1.8 is 422MB. I deleted them both but i still cannot directly download 9.0.8 which is 423MB.

I have also followed this KB and deleted content updates but still no go. Manual upload did work.

https://knowledgebase.paloaltonetworks.

What exactly is Firewall throughput , how do we decide for a network?

 I need to  deploy a firewall for medium sized enterprise so need help here to understand the Firewall throughput and how to evaluate the Firewall throughput for a network.

Needed confirmation on firewall Port spanning or port mirroring

Dear Team,

As per the customer requirement we want to perform Port spanning or port mirroring on the firewall interface so we need confirmation whether it is recommended from Palo Alto and if we perform this will there be any impact on the firewall a

Non business customer obtain PanOS downloads?

We use two PaloAlto PA-220 firewalls at my work place, and I have been so amazingly impressed   by the GUI interface and all the reporting tools on PA devices (especially the  Application Command Center ), I was considering piking up a 2nd hand PaloA

How to allow access to OWA to selected external users?

Hello everyone,

I was hoping to get couple ideas on the problem that we currently have and cannot give a solution yet.

About a year ago we were able to migrate our old firewalls infrastructure to PAN.

We had 1 firewall facing internet(Sidewinder) - basi

Global Protect Gateway - Split-Tunnel Exluded Domains

Hello

I am trying to exclude some domain from coming through the gateway to improve user experience so they are not hair-pinning through our DC's

at the moment I have no access route entered so I am running 0.0.0.0/0 out of our DC's - there are are c