This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Upgrade path question

We have a second Palo Alto that we want to upgrade and then use as a High Availability device to work with our current operational firewall. It had been used before, but is currently offline. I was following the upgrade path from 9.0.13 to 10.2.13-h4 (latest version I could find for the 10.2.* family). I was experimenting to see what worked du...

transfering license without a CSP account

Hello,I hope someone can help me.I tried to find myself the answer but looks like I'm getting a chicken-and-egg problem.To accelerate the learning curve, I've bought a PA-440 on ebay.To transfer the device, I need a CSP account but since I don't have yet a device, I cannot create an account. How can I create an account in these conditions?We int...

Antivirus mismatch without license

We have a cluster of firewalls with an antivirus mismatch alert. The thing is that there is no antivirus license.This issue happpened after one of the nodes went down and we had to perform a factory reset. We are seeing this by cli: av-version: 0 av-release-date: threat-version: 0 threat-release-date: 2025/02/10 19:10:10 CET I know it does not a...

Secondary IPSec tunnel with Prisma Access always down.

Dear community! I have a dual S2S VPN configuration with Prisma Access with static route path-monitoring as well as tunnel monitoring. The secondary tunnel is always down, only comes up when primary goes down. Do you know if this is expected behavior? Thanks in advance!!

Carracido by • L4 Transporter
  • 3609 Views
  • 3 replies
  • 0 Likes

Panorama Pre and post rules

Pre rules post rules in panorama of palo alto firewall 1..if post rules and pre rules have already configured in panorama and then we add another palo alto 2 in panorama which has post and pre rules as well which one it will select ?|Does pre rules of palo alto 1 changes and inherit pre rules of palo alto 2 in panorama ....and does post rules o...

Activity Locked on Beacon

Hello, I am having an error when trying to access the PSE foundation course on Beacon as in the screenshot attached. It is saying that "Activity Locked". What is the cause for this error and how can I fix this?    

temp_1740709165644.png
temp_1740709171082.png
temp_1740709176012.png

Resolved! PA-VM web interface login process is unbearably slow.

Hello, At some point, I noticed that the web login process on my PA-VM firewall started taking more than 90 seconds. Restarting the process using the debug software restart process management-server command didn’t help much. I then checked the system resources and applied Shift + M. The output is shown below, but it seems that RAM usage is not v...

ADovgals_0-1740741170029.png

PaloAlto firewall HA upgrade

Hi I am new to Palo Alto firewalls. I need to upgrade the firmware on PA-3220 firewalls in A-P HA . Firewalls doesn't have management ports connected to network and they are remote. It looks like i need management port access of individual firewall to upgrade the firmware. Is it possible to upgrade without management port access? if so, how do y...

thushy by • L0 Member
  • 1198 Views
  • 3 replies
  • 0 Likes

existing session behavior when routing table changes

Does anybody know if existing sessions can be updated when there is a routing table change, or if there is a way to clear sessions? I'm hoping for something analagous to the Session Rematch feature when policies change. My problem is that I have an existing session that becomes hung when the routing table changes. The routing table updates w...

Resolved! Palo alto weekly update

Hello, We are experiencing an issue with our firewall, as it is no longer downloading its weekly updates as expected. I attempted to manually download and install the update, but encountered a warning message (please find it attached). To clarify, there have been no changes to the configuration on our end. Could you kindly assist us with resolvi...

Need to check comptibility

Hello Team, We have PA-5420 firewall having 10Gig port. but downlink on cisco switch we have 25Gig port. if that is the situation then it will work or not.

jhussain1_0-1740586800075.png

When setting up HA from a stand-alone...how should I configure LAN ports on the switch? What state are links on the passive node?

I have a standalone PA-440 that I am in the process of moving to HA. I have all the wiring done with ISP1 and ISP2 broken out and going to the same ports on each of the 440s. That part all seems fine. I have all the licenses in place and I have green dots and sync across everything in the HA widget on the dashboard. I only have a single switch...

Prove the firewall innocent?

Hello, We have communication from load balancer to 2 servers called S1 and S2. Both S1 and S2 have same Windows Server version and have exact same patch level. Both serve a web-service hosted on their IIS. On Palo firewall, we have App-ID based rule allowing web-browsing as application. Till 2 days ago, both of them were working perfectly. Yeste...

Device and customer codes do not match a Support Account.

Hi, I recently acquired a used Palo Alto firewall and I'm encountering an issue during the registration process. The error message states: 'Device and customer codes do not match a Support Account. Please contact a Super User to send you a registration link for the appropriate Support Account.' However, I don't have access to a Super User sinc...

Eightin by • L0 Member
  • 1140 Views
  • 1 replies
  • 0 Likes
  • 24429 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks