Is there a link for BGP Table size a specific FW can handle?
I'm trying to configure GP Client on a MacOS Catalina (10.15.3) to connect via VPN using PKI certificates. I'm using GP version 5.1.1 (also I've tried with 5.0.6). The problem is that it does not prompt me to select my client certificate and eventually fails stating that "Required client certificate not found". I can see it's trying to work with...
Has anyone else noticed that the management functions through the web interface are incredibly slow with 8.0.2? Committing even a simple change brought these timings:- 1:10 just to get the progress bar beyond zero- 3:42 to complete the commit. Seems awfully slow....
Hi Team,Is there a we can migrate a PA 5050 multivsys configuration from one appliance and migrate it to two different 3220 appliances. Where Each Vsys from single PA 5050 goes to different 3220 appliance. For instance (Vsys1-PA 5050) should converted to one (PA 3220) and another (Vsys2 -5050) goes to second 3220 appliance.
Hi Team, Currently working on a PA migration 5060 to 5260. I tried to import the config in to the expedition tool, which is exported from PA-5060 appliance. I found the below error on expedition.I also tried to import it after converting to zip file, which also throws an error saying that. "invalid XML Could you please advise or help me conve...
Hi All, I need your inputs here. I have a client using ECMP (4 Links.) and they recently procured another ISP making it 5. Based on the documentation of Palo Alto Networks, the max ECMP is 4. Is there any other work around to make ECMP 5 or utilize the 5th ISP?
We want to add additional hard disk for logging in PA VM-500.What is the maximum limit for hard disk size?Do we require to shutdown the PA VM Firewall while adding new hard disk ?
Might be silly question, For inbound inspection does the cert has to be a CA.We use a wildcart so that will have to imported as CA, correct?
I'm pretty sure this isn't supported and I haven't been able to get this to work. I am attempting to use a single network interface template for multiple sites. Some use 30 sub-interfaces and some may only use 3. I want to push every sub-interface to all locations but only set IP variables on the ones that I need. Does anyone know how to set...
Hi Community, While exporting syslog from palo alto splunk in default format, what is the default format for config logs. Where I can see the default format. Next to hostname what is that value "1" where it comes from?
I have imported the intermediate CA, from 'Sectigo RSA Domain Validation Secure Server CA' and root CA 'USERTrust RSA Certification Authority' is already there on firewall default, but still outbound decryption fails.https://nvdpl.ca
What can i do here..Is it something we have to fix on server side or firewall. Not Working, Block sessions with unsupported cipher suites, Selected.Protocols allowed min SSL3.0 to MAX Working, with Block sessions with unsupported cipher suites, Un-selected. NMAP scan of server
Good Afternoon Community! I believe there is a minimum packet size for an application keep-alive packet for Palo Alto to register a session match. I am just having a hard time finding that documentation. Does anyone know and could share or am I mistaken?
I recently configured Path Monitoring for Auto Fail-over between 2 ISP but it is not working. Primary route is not removing from the routing table even when destination IP is unreachableISP-1: x.x.x.xISP-2: x.x.x.x I have configured both interface on single zone so that single policy applies then I configure Path monitoring. I am using single Vi...
Good morning,We are currently using Symantec VIP for MFA with our PA. Management would like to move to Okta and would like to know if both can be used at the same time? Thanks,Steve
PavelK
on:
Throttling ingress bandwidth on a sub-interface
