natted public ip

Demo Lab Environments - No Longer Available

I was going to review some Panorama setting options in the demo environment and the demo environment is no longer available. Did Palo Alto decommission these labs and was there any communication about it? If so, can anyone provide the communication? Here are the labs sites I have tried to reach and they just timeout. https://us1.demo.paloaltonet...

Verify and test backup firewall

Hello How we can verify and test the backup file ?

List of domains to allow for in-flight WiFi

Hi all, I've been working with a number of customers lately who have been trying to gather a list of in-flight wifi domains that they need to allow as GlobalProtect Enforcer exceptions and I thought I'd share them here. I'd also ask that you please post any additional domains or use-cases that are missing and I'll be sure to update my list. No...

Evaluation ESXi shutdowned

I testing Evaluation for ESXi PA-VM-ESX-10.2.5.vm_eval.ovaSuccessfuly,installed.But, after PA-VM login: indicated, I cannot login in entering default admin / admin.and,a few minutes later,PaloAlto-VM is shutdowned. Even I tried several times,it occured it everytime.Please help to address this issue.

Static default route setup for DHCP client WAN interface

Hello All I would be much appreciated if you can help with setting up my static default route which I believe is the culprit why I'm not able to route data traffic to internet. eth1/1: WAN interface, the interface is set as L3 untagged, configured DHCP-client for IPv4. ISP assigns a new IP every 10-12 hours and the bridge-mode cable modem...

Limited CLI Rights

Howdy All! We are in need of finding a way to give a help desk individual limited access to the CLI to run a Python script to clear addresses from the DoS Blocked-Table. The 2 commands it is running is the debug dataplane show dos block-table debug dataplane reset dos zone <zone> block-table source <ip address> What I have foun...

double nat

hello, my palo alto pa440 wan is connected to another firewall who is connected to the isp with a public ip natted to my firewall.i have to setup an ipsec tunnel i don't understand if i have to use the public ip or the vlan ip as local peer ip address thanks

How do I optimize Palo Alto firewall rules for performance while ensuring high-level threat protection?

Hello, I am new here, How do I optimize Palo Alto firewall rules for performance while ensuring high-level threat protection?

Microsoft Directory Services/ms-ds-smbv3 - Virus/Win32.WGeneric.yurld?

We are see numerous alarms from our SIEM from our Palo Alto firewall. Here is a copy of a scrubbed log message below. When asking the user about their activity, they only RDP'ed into various servers from their laptop via the Globalprotect VPN for remote admin work and ran a batch file that re-maps drives. Additionally they noted browsing to \\&l...

Need assistance with troubleshooting Routing between 2 VR's that are connected via BGP

Hi, We have two VR's setup NSWHealth_VR and HSP_VR and there is BGP connectivity between them. We can see routes are exchanged between them. However, for one particluar route eg: 10.24.x.x/13 on HSP_VR we can see it on the loc-rib but not on the RIB-out. All other routes are working fine. Only this particular subnet is having issue. We have chec...

Palo Alto Support license expire alert

Is there a way to automate support licence expiry alerts? Threat prevention licence is visible in logs (critical) but support is not

Unable to Register Devices - Please contact Support

Hi - just bought 3 No. PAN-PA-220 devices. I've tried to create a New User via support.paloaltonetworks.com but just keeps coming back "Error: unable to create user account. Please contact Support." I wish to get these registered. Can anyone help on this please? All the serials have been entered, the Sales order info & all the "*" fields...