HI Expert , I would like to know about that if I would to migrate local firewall to panorama and muti vsys is concren? Please suggest to me Thank you
What model of PAN NGFW we will position if the competitor is Watchguard M4600 for 1500 users?
in my current scenario, I have 4 interfaces configured with different Public IP address and each interface linked to the different router and each interface have different services (Internet Email1, Email2, VPN) Our Plan to get a new line from a new ISP, in these case, we got only one router and the old Routers we canceled and we will get 6 Pub...
HI, we are hitting a critical bug in our PA5020 about memory leak. Current version is 8.0.8. So we are planning to upgrade. What PanOS version do you recommend us? more "stable"?
I am trying to setup inbound decryption for SMTP (TLS) using the default Decryption Profile.What destination IP address do I use in the Decryption Policy: public pre-NAT or private post-NAT? Regards,Han.
I have a VM-100 running 8.0.12. I inherated this configuration from the previous network engineer. I am quite new to PAN-OS and have found that an interface that faces the Internet is shutting down. I can cycle the port in the GUI, and able to ping to the Internet 1.1.1.1 and 8.8.8.8 and within my LAN for no more than 5 minutes then the inter...
I am new to Palo jsut going Live with a unit. I am seeing when users move from desk to desk and do not log out but login again at the second station their filtering does not function. They are either filtered as per the last login previously at the station (though that might be a user again also logged in somewhere else) OR they get no filteri...
Question for the community.I have a site with 2 ISP, 1 circuit is a crappy 10mb circuit I want to use for just guest wireless. Is it possible to run 2 ISP on a PA220 and keep the NAT and security seperate?
need to know if traffic is discarded how long that session remains in PA?
Hello Palo Alto Community,I'm deploying a HA Pair of Palo Alto VM Serie (hosted on my infrastructure) and I'm being blocked by a situation I don't understand.HA1 is UP and the two member can see each other. I'm using the management interface as HA1 interface for convenience purposes.HA2 is ethernet1/2 which is on a Port-Group dedicated for HA2.W...
Hi,I have a lab with a active/passive Palo Alto firewall setup. I have had a look at the Palo Guide for setting up OSPF at: https://knowledgebase.paloaltonetworks.com/servlet/fileField?entityId=ka10g000000D8HwAAK&field=Attachment_1__Body__s From this, it looks like it is not possible to form an OSPF neighbour with a standby firewall. The sit...
Hi i have a question about URL Identification. i use url object in security policy and no use ssl decryption if no SNI is present and there is no CN enrty, how can identify URL? thanks.
Hi there, Quick question. I'm currently troubleshooting a PA 3020 in version 8.0.12 for one of my customer. Its PA has huge DP CPU usage (arround 80%). I try to figure out the reason of this usage.I've isolated the "ctd_token" process which is a big CPU user. Can you give me a hint about its utility?cheers,Edouard
During Ignite we were told that DNS is coming as license service in PAN OS9.0.Need to know is this service different from dns sinkhole? IF it is how it is ?
We have traffic rule to allow the traffic but seems traffic is dropped by the PA when i did pcap.then from cli i did show session all filter source there i see old session from april in discarded state.i ran the command few times and this session was always there we try many times the traffic never worked. after clearing the old session id tra...
