General Topics

Resolved! Is higher latency normal on a VM compared to hardware?

Hi All

At home I run a PA-200, but I've been toying with the idea of moving to a VM (both lab-licences).. But whilst the VM runs WebUI runs 100x quicker, MGT interface is fine, but on the actual FW interface it has a much higher ping latency.

When pi

Resolved! when doing commit from PA i get error

i am doing temp override on the PA so that managenet  interface ip permitted list is as per panorama but when i do valid

commit 

etails:vsys1
Error: No PROXY_OPTOUT notify page defined in vsys1.

Resolved! QoS Guaranteed Bandwidth question

We have a couple of tenants in our building and I was wanting to insure a guaranteed bandwidth of our 100 Mbs circuit for us regardless of what the tenants are doing. I was looking at something like this: I set all of our traffic to class 1 and all t

Resolved! Dataplane Limitations - When to use a router for intrazone vlan routing?

Hi,

This is  a question about when to use the firewall or a seperate core router to route traffic vor vlans in the same zone (intrazone).

As this traffic does not need to be inspected, it should only be using the network layer and cpu of the dataplane.

Resolved! Palo Alto - Dynamic Updates

Hi I'm new to Palo Alto alto. but my company have several diffrent versions of Palo alto firewalls, some with direct support via palo alto PA-3050 where i have access to download the Dynaic updates directly. Plus some that we have support through a r

Resolved! Recommended PAN-OS version for 820 and 220

Can one let me what is the recommended PAN-OS Verision for PA-820 and 220 ?

8.1.6 , 8.0.15 or ?

Resolved! Re-order BGP Import/Export Filters via CLI/API

Hi,

I'm looking for a way to re-order BGP Import/Export filters via the CLI or via the API (preferrably CLI).

I have not been able to find a set, move or edit command which does this and searching the API browser there doesnt seem to be a path that w

Resolved! Documentation bug? User-ID XML API has double closing tags

The XML API documentation for 7.1, 8.0, 8.1, and 9.0 appears to have an extra closing tag for the <uid-message> object.  You can see it on the following pages:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-panorama-api/pan-os-xml-api-request-ty

Resolved! Deny internet traffic for a specific subnet

Hello, is it possible with palo alto firewall to deny internet traffic for a specific subnet?

let's say I have this subnet: 10.100.30.0/24

I want 10.100.30.0/24 to not reach the internet.

What should I do?