HOW TO CONFIGURE SNMPV3 POLLING via terraform

I configured a template using the config mentioned on https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHOCA0

And I want to automate this using Terraform. Is there a way to do it?

BGP RIB out and Local RIB

Can someone explain me the difference between RIB out tab and Local RIB in BGP.

What is contained in RIB out and  Local RIb?

Also what is pupose of Import and Export tab in BGP

Appreciate your help.

-Rajaram.

Firewall Monitoring - Availability and hardware utilization

Hi There,

I need to monitor the firewalls, actually are 2 Ingress, 2 Egress, 1 Management and 1 panorama in 5 different environments, (dev, no prod, and so on) If you google "custom pan os metrics published for monitoring" the first link has the step

DFA in PA

As a result of the covid, many clients with GP are asking me about the possibilities for implementation DFA with Palo Alto GP. 

I was checking about client certificate config in GP but i think this is not very safe at all.

What recommendation/DFA do yo

Session Timeout Issue - Tunnel Active but User ID Authentication removes

Dear Team,

We are facing an issue in VPN where in Authentication of users is removed frequently at a random time.

IMPACT :

We have created Source User base policy - Hence once a user session is timed out, browsing of the user is impacted. User needs

Captive Portal + Global Protect

 Hi team,

How to make work the Palo Alto Captive portal after users logged in to Global protect. ?

Users who got connected to GP should get captive portal auth page while they try to use internet.

Is there any way to achieve this ?

Microsoft Edge is blocked.

Hi everyone! I have such kind of problem, maybe some of you have faced this.

I've blocked Chrome, Firefox and Opera, but it also blocked Microsoft Edge, which should work.

I tested deleting this application filters, which I created and found that the p

DigiCert SHA2 untrusted

We own a wildcard cert from Digicert for on-prem or cloud hosted websites. When doing decryption traffic to our websites breaks and i had to uncheck 'block untrusted certificates' to make it work. 

How can i keep blocking untrusted certificates and st

RDP To VPN Connected User

As the title, is this physically possible? 

Long story short, have a requirement to connect remotely to a company users laptop, which is  connected to GlobalProtect VPN... via remote desktop from another pc on the same companys LAN

Have attempted to

SSL Decryption every day more exclusions

Hi,

We are using a PaloAlto 3260 with PanOS 9.0.7. We have configured SSL decryption wich uses a certificate signed by our own Windows CA server. Each client in our environment has the Windows Root CA.

In the beginning (2 years ago) everything worked

Add prepends to a static route redistributed to BGP?

Hi all,

Is it possible to ddd prepends to a static route redistributed to BGP?

Loopback between two virtual routers are not pinging

I created two Virtual Router for internal bgp peering to export routes. 

Virtual-Router-1 - loopback-interface- 5.5.5.5/32 ; zone-five

Virtual-Router-2 - Loopback-interface-6.6.6.6/32 ; zone-six

security policy any-zone to any-zone is allow.

I am unable