Hello community, I encountered this error when trying to update the certificate device on a PA 520 firewall, running PAN-12.1.4-h2. Is there a known solution to this problem?
A customer using PA-410 and PanOS is 11.2.10-h3. When the customer attempted to submit the configuration, an internal error occurred. And I found that logdb-quota shows abnoraml Has anyone run into this issue before?
Opening a TAC case with Palo Alto is such a painful process Calling support makes one go in loops and then hangs up
I am the volunteer webmaster for Berkshire Family History Society, a UK registered charity. I am seeking guidance on the correct process for requesting review of a Risk Level rating when the URL category dispute has already been resolved. The history is straightforward. On 11 May 2026 our domain berksfhs.org was classified by PAN-DB as Malware...
Hey All, thank you for those who helped me out yesterday!I'm back with what i think is a doozy,I tried to change the firewall's login IP from 192.168.1.1 to 192.168.69.1. The problem was that the firewall already used 192.168.69.1 as its office network gateway, so we were trying to use the same IP for two different purposes. The firewall detecte...
Howdy Palo Alto Community!In addition to my employee role in the IT department, I volunteer as a staff advisor for the Islander Cyber Society (our campus cybersecurity club) at Texas A&M University–Corpus Christi.Previously, we participated in the Palo Alto Networks Cybersecurity Academy and explored offerings such as Cybersecurity Fundament...
Dear Comm, I was googleing alot about this topic and but only found this: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXlCAK My specific question is, if a the User ID agent show the username "pre-logon" learned via "GP" - does this "user" counts to the "gruoup" of "known"-user which I can use in security policies? ...
Hello everyone, Here is the scenario: PA-A has the full configuration and a Device Priority of 50. PA-B has no configuration and a Device Priority of 100. Both firewalls are configured in Active-Passive mode and belong to the same Group ID. Under High Availability → General → Setup, for the option “Enable Config Sync”, which firewall should ha...
I have a Cisco backround & I am currently studying Virtual Routers & Static Routes in the PA 8.0 admin guide. I am trying to understand how Metrics are used in the firewall because it sounds like Administrative Distance does the same thing. Can someone tell me if my theory is right when it comes to Palo Alto forwarding packets to an in...
I would like to view XFF IP Address in the Logs. I went through a few articles and have a few clarifications: https://docs.paloaltonetworks.com/network-security/security-policy/administration/identify-users-connected-through-a-proxy-server/use-xff-values-for-ip-based-security-policy-and-logging https://docs.paloaltonetworks.com/network-securit...
Hello community, this topic has been on my mind as well. I already searched the forums, but unfortunately I couldn’t quite make sense of it. Which setting do I need to configure on a VSZ 7.1.1.0.872 for the syslog server? Take a look at the image, please! Or rather: will I then see these entries in the syslog that ends up on the Palo Use...
Design active passive connected with vrrp switches for physical connection and AE i want to connect full mesh topology but want to confirm it's working like stack switches. PA1 > (2 links sw1,sw2) PA2 > (2 links sw1,sw2) so for aggregation to i can assign port to the AE. thanks.
1. Create a Custom URL Category with * under ‘sites’ (Objects >> Custom Objects >> URL Category >> Add) 2. Create a URL Filtering Profile & set your Custom Category action to “alert” (Objects >> Security Profiles >> URL Filtering >> Add) Tick the box to log XFF on the ‘URL Filtering Settings’ tab… ...
Hello, We are evaluating the implementation of X-Forwarded-For (XFF) functionality for logs. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/identify-users-connected-through-a-proxy-server/use-xff-values-for-ip-based-security-policy-and-logging However, this functionality was activated and affected the traffic, denying traffic...
Thank you for your continued support. Please allow me to confirm the following. ① The PA-400 and PA-500 series do not have HA ports. However, we are assuming that the regular ports will be used as HA ports. In that case, are two HA ports required? Currently, we are using 8 ports (1 port for HA), so we understand that a device with 9 or more ...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
