Hi, How can I upgrade8.1.8 from 7.0.1 can anyone tell me the procedure........
Hi Team, I have EBGP peering between PA- Router using EBGP. learning route 10.10.1.0/24 I want to advertise those EBGP routes ( ex 10.10.1.0/24) learned by PA to AWS where I have another EBGP peering between PA and AWS. Could this be done in Palo Alto. I see redistributes rules are there . I just wanted to have clear understanding if one ebgp...
We're experiencing multiple issues with udp-based applications after network outages. A common problem is that udp tracking sessions (I assume from ALG) in PA for DHCP create issues and clients are unable to attain IP-address. This error must be manually solved by clearing sessions. We've also seen this error for other udp applications. Question...
Dear Community,First of all, my best regards, here are my questions:I need to download the updates of a PA firewall model PA-220, I do not find any update repository to perform the update manually, they tell me that it is necessary to associate the device with an account, but this device still cannot be associated with an account because they do...
I have a set of 3020 that are lab that I need another set (for consistency) but the 3020 are not available for purchase.after today. Is there a way to switch these to prod (for an additional cost)?
Hello all. I have had an issue with PANOS since 7.0 (Currently I am on 9.0.2-h2) where the application id feature is not reliable in security rules. I can add a rule and for example lets say I allow ssl to 10.1.1.1 from 10.2.1.1 no user restrictions and just add the ssl application and commit. Then I try to access https on 10.1.1.1 from 10.2.1.1...
Good day, Inactivity and session lifetime forced logouts are not enforcing logouts on open clientless applications. Currently running 8.1.8H5 and have found that clientless application sessions are remaining open even after a forced logout. Going back to portal tile page, requires a login for any new application but all open sessions reamin ope...
Hi, have this problem since a few releases back.Installed latest Globalprotect client for linux, currently 5.0.3. Install ok, runns ok but doesent activate and connect.root@khazad:/home# systemctl status gpd● gpd.service - GlobalProtect VPN client daemonLoaded: loaded (/lib/systemd/system/gpd.service; enabled; vendor preset: enabled)Active: acti...
PAN OS 8.1Monitor\URL Filtering"Detailed Log View" (magnifying glass)In "Details" paneClicked on the 3 dots beside URL to see the full url string, but no joy.How can I see the full url there?
I am trying to setup site-2-site VPN between a Cisco router and PaloAlto 820 running 8.1.9HF4. Everything is working fine in IKEv1but it is not working in IKEv2. Look like PaloAlto is not playing nice with Cisco devices. If I replace the PaloAlto with Checkpoint firewall, it works fine with Cisco in IKEv2. I have a ticket open with PaloAlto...
Hello, It's possible to redirect some domain name (exemple: *.com and *.net) to tunnel VPN ?I think that it's possible by creating address object and use by policy based forwarding for redirection, but I can't use wildcard match all *.com. thanks.
I was surprised to know that PA 5050 does not support Pan OS 9.0Anyone knows why it is that?
Spoiler (Highlight to read)Hello there,Does anyone else have problems with response pages in IE11?They are working fine with Chrome and Firefox, but are not shown in IE11.Thanks and regardsHello there,Does anyone else have problems with response pages in IE11?They are working fine with Chrome and Firefox, but are not shown in IE11.Thanks and reg...
Hi, I have a question regarding changing master key for firewalls from Panorama and its consequences. My situation is the following:- Two Panorama servers in HA- Two PAN Firewalls in HA (let's call it as HA cluster 1), already managed by Panorama Seems that I changed the default master key for the firewalls but I don't remember what is the curre...
Hi All, Hope you all are doing great. I am facing some issues in working with terminal service agent. I will have a small intro on what I am trying to do. As of now, I am in the testing phase for implementing TSA in our environment. For this I am using a server for testing. I installed TSA in thatbserver and called the same in a firewall and the...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
