Traffic Problem when going from Layer 3 to Layer 2 configuration in a VWire PA Deployment

Hi,

So our current use case is like we have GW Router -> Switch -> PA in Vwire -> Switch. The downstream switch is connect via native VLAN 1 to PA while upstream switch interface is in Vlan 10 in a L3 deployment. Now we want to move this deployment

"Server error : Timed out while getting config lock. Please try again."

Hi Team,

We getting the error "Server error : Timed out while getting config lock. Please try again.".

We tried to restart the mgmt server but the issue still same. When we rebooted the firewall issue is resolved.

Pan os 9.0.12

PA-3050.

Anyone help me

Palo 1410 - Inability to ping my through ISP

New to Palo Alto. Have installed a new PA 1410. This is directly attached to the Ciena 3924 device provided by the ISP. Connecting a laptop to that device allows full internet access. The external interface to access the internet on the Palo Alto is

DNS server can't access to management interface

Hello,

I don't know if this is a normal behavior or not. We have 3 DNS servers. 
DNS_A
DNS_B
DNS_C

We are not able to ping or ssh/http to the management interface from the DNS server, if this DNS server is configured as DNS server in the firewall.

When we

Global Find search results show spinning wheel, unable to expand results after PAN-OS upgrade to 9.1.16

Does anyone know if there is a CLI command to restart, or way to rebuild, the search database? After upgrading to 9.1.16 I am unable to expand search result details for attached objects/policies, instead it hangs with a spinning wheel. Additionally,

Certification expiratio - Redistribution question.

Hi,

We are not using redistribution in our FWs. We just have our PAs connected to a UIAgent. So i understand that we dont need to upgrade FWs, just install app&threats version.

The point here, that PA releases a python script and its marking like r

Asking about poor response time resulted in the sales team using personal attacks.

Several times now Palo Alto sales representatives have accused me of the “fact” of my unresponsiveness/unavailability being the reason for a case taking so long (it was never resolved). This concerns me greatly as I have always tried to respond in a

Panorama Policy Push Failed

Hi Team,

I am unable to push policy from Panorama to one of the firewalls. Getting the Commit Failed due to below reason.

. ssl vpn cert file (CERT_GW) processing failed
. (Module: rasmgr)
. global-protect-gateway tunnel interface (tunnel.1) in vsys

Upgrade Path from v10.1.10-h2 to 10.2.7

Hello Fellows,

What can be the best path to upgrade from v10.1.10-h2 to 10.2.7?

Can we do it directly ?

We have Stand alone 220s and 2 HA pairs of 5220.

Thank you

Regards

Hina

CPE for the Conferences or Summits

Hello,

Can anyone help me how to check how many ISC2 CPEs are provided from Palo for the Summit and Conferences (like one we have recently in London Threat Management MicroSummit on 5th Dec-2023?

Thank you

Regards

Hina

Failed to Fetch the Device Certificate

Hi Team,

I facing the issue to install the device certificate. I have generated the OTP in CSP. and installed it in the panorama-managed firewall. but we are getting the below error ' Failed to fetch the device certificate.TPM public key match fail