Now I can not download software version 11.1.5 or 11.1.5-h1 now. what's happen?
Hello everyone,I upgraded a Pan log collector to Software version 9.1.11 . Recently I receive the event "No valid device certificate found" . So I need to generate OTP certificate and install it . This can be done easily through GUI. However, with LogCollecor , Web UI is disabled and CLI is the only way to access the device .Can anyone guide on ...
Hello, I have two sites: Site 1 and Site 1, both running Palo Alto NGFW. Currently, traffic is routed between the sites via an IPSec VPN tunnel. However, we’ve recently set up MPLS between the sites and are planning to gradually migrate traffic from IPSec to MPLS. The challenge we're facing is related to asymmetric routing, where requests co...
I would like to ask again for PANOS version 11.1.5-h1, what is the current status? Is it still monitoring?
Hi, How can we know the frequency release version of PAN OS? Or just wait for new info on software release guidance eg version 10.1.14-h8 Version Represents Frequency 10 Major Version 1 Minor Version 14 Maintenance H8 hotfix (urgent fix on introduce issued) Thanks in advance!
They mentioned that based on this behavior in which they think that this is a : 1.-Threat identification.2.- VPN disconnection when using the sbs robot, which performs queries to a certain page located in the internal network of an entity (Judicial Power). 3. -Sbs query: add ip range in the policies so that a user group can access from vpn con...
I will have a single PA device in the cabinet, so no HA on my end. I understand the risks and this is not part of the question. Datacenter/Colocation is providing me dual ports into the cabinet and they are handling VRRP through their IP blend. They will provide me a /29 with the first 3 IP's being the VIP, R1 and R2 addresses. I am being to...
Hello, team. I have a problem.I have a couple of users created for read mode administration of the Palo Alto Firewall Cluster (they are local users). When I try to test the Test Authentication Server Connectivity (I follow the documentation to the letter), I am constantly getting the same error when testing with the local users. Any idea how to ...
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HCcXCAWI could see the KB say's 10.2.6 version are covered, does that means it covered in 10.2.10-h9? or it's like 10.2.6-h1, 10.2.6-h2 like that?
I am trying to debug high dataplane cpu on 3260, and both aho and dfa is set to software, when disabling software offload (enabling hardware offload) the high dataplane cpu is a problem of the past we have gone from 75+ to 9-10 %. When we disable sofware offload and reboot the firewall it reenables software offload after boot - so to questions c...
We have a website getting blocked due to it being categorized as Insufficient-Content. It wont allow re categorization as there is no content. T The issue is that the url normally has a target at the end of the irl that changes. could be google maps or youtube links. How can i get the base url re categorized please?
Is there anyway with the monitor to monitor traffic that is using and configured PBF?
Hi, We have two PA 850 firewalls in HA mode. Last week, we upgraded the firmware from 10.2.10-h7 to 11.1.4-h7. However, we now want to upgrade to the latest version, 11.1.6-h3. Could you please confirm whether this version is stable and free of major bugs? Can we proceed with upgrading to 11.1.6-h3?
Hi PA Live Community... I deployed in my Azure environment a PA Firewall VM-Series, I got the image from the Azure Store under the BYOL option. Once deployed in an AZ Virtual Machine with PANOS, I have configurated all the GP VPN Solution. GP Portal, GP Gateway have all settings fine but when I move into the GlobalProtect Client section to rec...
Hi. I'm trying to setup alerting for multiple elements of the Palo Alto firewall, one thing I've not been able to work out is how the get alerts for when the Dynamic updates aren't working and the same with the URL DB. So I can be made aware if the updates haven't updated in xxx days. They're on a schedule to download and install, but would be...
Raido_Rattameis
reaper
on:
VPN with two subnets
TomYoung
on:
Device Security license
reaper
on:
No proposal chosen ikev1
