I need to increase the GP IP range. Is this as simple as adding an additional pool?
I have a requirement to update the 100s of /32 address objects which do not have a CIDR. Does anyone know of a script or other means to do a bulk update of the addresses to append CIDR?
A friend of mine found a PA200 at a thrift store for $5.00 (without a power supply) I plugged it in today to see what state it was in and it looks like it had a rough life... All the guts are still inside and everything is clean and connected however it won't even get to the initial bootup MAINT prompt, anyone seen this before? Sometimes I get ...
Hello All, We have Global Protect License for mobile we upgraded recently to 5.0.8 and i see my iphones will not connect.did any one face this issue ? Works fine with windows and desktops only with iphone i face the similar issue.Any help will be much appreciated.
Hi All, I would like to know whether it is possible to use different deployment mode (L3 or L2) for 2 VSYS of a same physical paloalto firewall box. We have 5620 and 5680 model. Thanks and regards Chandrajit
Hi, According to the PA220 data sheet, firewall throughput is 500/580 Mbps, With Threat prevention throughput 240/280 Mbps. What about in additional with SSL forward proxy ? What is the tested throughput in 9.1.x ? Thanks, E
Hi Team, Wants to understand why ssl certficate is required in the gateway when tunnel mode is in IPSEC. Can anyone please provide the in depth connectivity process and justification for the need of SSL certificate on each gateway. -Regards,Sethupathi M
Dear Team, I have a question do you recommend putting Zone protection on the Zone which I have for GP. I am using loopback External IP for the connection and in the GP Zone I have added the tunnel interface. Just want to understand if best practice to put zone protection on this zone? Thanks
Hey, so I've been working with PaloAlto technology for a couple of months now. I'm trying to set a lab environment to continue practicing for my PCNSE. However I am having some trouble figuring out the setup (specifically when it comes to the VMWare configuration). I'm working on vSphere using ESXi. I have a virtual Ubuntu Host and a VM-100 depl...
Hey folks-Ive got an HA pair of Pano's in AWS that I needed to do some local logging to due to some missing features in Cortex. Added the disks....changed the mode and poof! NothingIm not seeing a default logging collector or collector group as the documentation indicates I should have. When I try to manually create the collectors there are no d...
* We have Azure AD Connect sync On-Premise Active Directory with Azure AD* We have valid Azure AD Premium license We would like to know whether we can configure MFA for our VPN. If so which one we need to chooseAzure MFA server or Azure MFA cloud? Please give me the highlevel steps to accomplish our requirement
I have version 8 on a PA 3220 and on the secondary device ( hot stand by ) we have version 9, there is some problem in that they work with different versions
We are on MineMeld version 0.9.52. We had an incident with MineMeld on the 4th of March that caused a major outage for many of our users. We have four miners feeding in IP addresses for our block list (let's call them bl-1, bl-2, bl-3 and wl-1). The first is for addresses we want to block, the next two use external threat feeds (one of them is...
I have a new PA-220 for a test lab, and this is my first time configuring any PA device from scratch, so I apologize in advance if I've missed something basic. I have set up the interfaces and I can ping out using the troubleshooting -> ping utility in the web UI, but ONLY if I specify the outside interface IP as the source during the test. ...
Management interface generating unnecessary traffic on WMI Port... what could be reason?? Appliance: PA-5020PAN-OS:8.1.11
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
