How to physical link down when rollback

Hi, I am using the 5.x version of paloalto.

HA is Actvie(FW1) - Passive(FW2) configuration and use link group.

For example, failover occurs when the wan link goes down. (FW2 / Actvie)

When the wan link is up rollback.(FW1/ Actvie)  At that time, the ent

Upgrade Palo Alto via Panorama

Hello,

We have 100 Palo altos firewall that we would like to upgrade via Panorama to 9.0.7, I am trying to create a group based on the prisority of upgrade to push the device>deployment >software package. 

Is there a way from Panorama 9.0.7 to create

hi, can anyone help me obtain the latest vm series appliance for testing?

the latest i have is 8.1.0

thank you

Paloalto home lab

Hi community,

I want to create Palo alto home lab i have  PA installed to VMware workstation on laptop. now I want to connect one interface of Palo alto to wifi and one interface to my local laptop on which Palo alto image is running so I can filter T

Refund request for VM-Series Next-Generation Firewall Bundle 1 (sold by Palo Alto Networks Inc.)

I have used VM-Series Next-Generation Firewall Bundle 1 (sold by Palo Alto Networks Inc.) in AWS for learning purpose . But its charged me $320 that I can't afford. amount automatically deducted. I contacted with AWS and they waived off their billing

Virtual wire with Vlan trunking and vlan mapping

Hi all,

I currently have a palo alto that is connected to my switches.

The palo alto is configured as a virtual wire, and the WAN side of the palo alto is connected to VLAN 10, the LAN side is connected to VLAN11

This allows me to quickly move customer

Panorama/GP questions

- Being in different versions of Panorama (9.0.4) and PaloAlto (8.1.13), is it possible to deploy GlobalProtect clients? It does not work and I wanted to confirm this information

- Is it possible to publish the linux version in the global protect port

GlobalProtect Windows Client Persistent Breaks

Hi!

We have on ongoing issue with Windows users trying to use the Globalprotect client (up to 5.0.3 now) resulting in up to 30% of the clients persistently breaking with a driver issue[0] which has gone on long enough that we're considering using anot

Does changing GlobalProtect VPN to Always On require reinstalling?

I have about a hundred users remote but they don't always need to VPN. However depending on how long WFH goes, I may need them to VPN for things like WSUS windows updates.

Rather than assume everyone will follow instructions to connect to VPN (I still

Change Global Protect Config when users are connected

Hi Guys,

We have global protect deployed. Portal and Gateway are the same firewall. 

Now if I do any changes on the Gateway, are those changes immediately effective for the connected users as well?

Is there any "profile" that is being pushed to clients

Globalprotect: gateways or satellites?

I'd like to setup a GP environment with a single portal, but two different locations (gateways?) where clients can connect. The documentation talks of gateways and satellites. I'm uncertain of the differences and when you would choose one or the othe

Global Protect fails after some time

GlobalProtect fails mid way after connecting, remote sessions are opened and then suddenly everything stops working. On checking route table though it seems routes get removed. We have tried installing latest version global protect version 5.0 or 5.1