General Topics

Resolved! Disabling Graceful restart for OSPF

Hi team, When performing a failover in our office we completely lose connectivity in or out. When troubleshooting we noticed we could not see the OSPF peer on the router or firewall. Looking through the system logs I notice:routed-OSPF-stopped-graceful-restart description: OSPF stopped graceful restart. Protocol: OSPFv2. Exit reason: time outthe...

ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

Hello All, The firewalls are configured in high availability (A/P) but the running configuration is not synchronized. I have already tried to restarting management server of both firewall as well I tried to sync manually but getting below error:- After that, I have tried to sync from CLI mode by this command:- request high-availability sync-to...

Panorama OVA download

Hi guys, I hope yus can help me out. I'll be deploying Panorama in ESXi server, where can I download the OVA file? I know this is a very stupid question. I'm following the steps below, but I can't find it under my profile. https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/instal...

Resolved! Crazy Q... Minemeld on raspberry pi?

Has anyone been brave or bored enough to try to run MineMeld on a pi? I just tried it on Ubuntu 16, Ubuntu 18, Debian 9, CentOS7 and was unable to get any of them to succesfully install. It seems to get close on Ubuntu 16 and 18 but after getting past 3 nasty red errors during the ansible playbook process I was roadblocked at a 4th one that stum...

Resolved! Problem with GUI and WildFire

Hi Everyone,I have a problem with my PA-200 device, when the device turns on the status LED is still orange and I can't log in through the GUI interface due to "Error in parsing xml response". I found the following solutions:https://live.paloaltonetworks.com/t5/General-Topics/Error-in-parsing-xml-response/td-p/97750https://knowledgebase.paloalto...

Captive Portal not working for Untrust to Trust connection

I've a requirement to validate users from Internet (untrust) when connecting to Internal (trust) network. I followed all steps marked in Admin guide and elsewhere for setting up captive portal, but somehow it is not working. Just to be sure i followed same steps for Trust to Untrust and it is working as expected. So i'm perplexed if this is poss...

How to migrate configuration from 3200 series appliance to 5220.

Hi, Could you please help me to understand the procedure for how to migrate configuration from a 3200 series appliance to 5220.

Resolved! PA 5520 to PA 5220 Cluster migration

Hi, I want to migrate one PA Cluster from 5020 7.1.16 to 5220 8.1.8. Could you please help me with the steps to follow for this migration and is there a document available? ThanksJP

ICMP Timestamps

Hi,Can anyone please tell me if there is a way to stop my PA from responding to ICMP type 13 and 14 timestamp requests/replies?Cheers

File is being blocked

There is a file that is being blocked with an extension of .ATB.ZIP is there anyway to allow this file to be downloaded instead of being blocked by the rule. I am guessing this is a predefined rule in the Palo Alto because all other .zip files are allowed. Should I inform the company to change the name of the file so that it is allowed to be dow...

Resolved! ipsec debugging

Hi I have a ipsec tunnel with a vendor - they use cisco on their end.I have been advise IKE and ESP lifespan is 8 hours ... 28800 sec But what I have noticed is if I set it to this around 6 hours in traffic stops passing.I have to restart the tunnel - via the gui to bring it back. I have tried setting lifespan to 6 hours on my side , but i get a...

Resolved! Troubleshoot Drop Counters

Hi Community, I got a question:During a project migration, we noticed asymmetric routing and had to disable the protection in Zone Protection profiles.While doing the tasks for aftermath, I wanted to analyze the problem and had a look at the global counters.There are a few drop counters I want to analyze deeper, so:How can I match specific sessi...

SSl decryption-Failing android apps

All, I had enabled ssl decryption and no issues with desktops. But, Android phones have issues with apps like youtube,DUO etc but can browse through chrome.I assume this is because of certificate pinning that these apps use. Please correct me if I am wrong and also is there any way to resolve this besides excluding the URL or IPs?

Resolved! Aboute ACE exam and about the trainings!

Guys, I wanna to take an ACE exam and should to attand to the training courses. i've been told to attaend to the firewall configuration essentials Firewall Configuration Essentials 101 PAN-OS v.6.0 RevC training course, but i noticed also the follwoing training course Firewall Configuration Essentials 105 for PAN-OS 6.0 RevB. Does anybody know t...

9.1 testing - a couple things...

I have been playing with new features in 9.1 in the lab and have noticed a couple things that others may want to be aware of: * The Global Protect ACC tab is nice, however it does not include Global Protect client-less activity* With the addition of new GP logging there is now a GP log setting under the device/log settings tab. This allows for s...

Discussions

Resolved! Disabling Graceful restart for OSPF

ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

Panorama OVA download