How can use loopback for virtual Ip

Hi expert ,

I would like to know about that if that possible or not about use loopback interface on palo alto such  as Virtual IP same like VRRP in a scenario don't to downtime  use VIP 

Thank you  

IPSEC VPN tunnel monotor showing down

We have configured Tunnel Monitor for IPSEC VPN to monitor IP Peer side server.

My query is I dont see ping packet intiated by tunnel interface towards destination IP on firewall logs.

Though in show vpn tunnel-flow id I can see monitor packets sent

Panorama NAT Translation

I have two datacenters in a region to where multiple offices backhaul to the primary datacenter or may fail over to the secondary datacenter. Both firewall pairs are managed by Panorama. Each datacenter has its on unique external IP range. We break o

Palo Alto VM firewall registration

Dear All,

I am a beginner to this platform and I successfully dowmnload a copy of PAN-VM-7.0.1.ova  from the internet to start hands-on practice. I am trying to register the VM firewall to the Palo alto support website for more features and trial lice

User ID firewall having an empty status column for the server monitoring

Hello,

We are using PAN-OS 8.0.6-h3. Our User ID firewall is showing an empty status column for the server monitoring.

> show user group list

Server error : op command for client useridd timed out as client is not available

^^This was encountered whi

HA on aggregated interface

We don't have a qsfp module yet for our core switchse yet, so i am trying to use regular 10G interfaces in aggregate ethernet type HA.

But neither Panorama nor the firewall iself seems to give the option for aggreagate interface in the dropdown of HA2

How to utilize VM-Information source

All,

I'm attempting to alleviate some of the day-to-day operations that we do, and found that VM-information sources might be useful. I've got a test environment that can talk to a test vCenter and pull the attirbutes, but I'm not able to get the tag

Active/Active ECMP

I have two Palo Alto 5250s running in my core network as a core firewall for all campus and datacetner traffic. They are running active/active. I have layer 3 routing south bound to two cat9500s not in VSS. So I am running HSRP on each 9500 alternati

Application Filters and dependencies - General Internet Use

Hi

I've been following the instructions here: https://live.paloaltonetworks.com/t5/Blogs/What-are-the-recommended-applications-for-internet-access/ba-p/153835, on setting up applications filter for controlling internet access. I've configured the app

SSL Inbound Inspection

Hi Team

How to upgrade a virtual panorama server from 7.1.16 to 9.x

Hi, 

I would like to upgrade a virtual panorama server from 7.1.16 to 9.x which has all Firewall logs and ACC reports. I read about log migration and Panorama mode change should also be part of this upgrade. I have never done a similar kind of upgrade