There is plenty of space on the disk. Any insight on what could be causing this problem? Thanks in advance!
I am trying to understand the relationship between apps and how rules for specific apps affect the access of other apps. I was reading this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClirCAC In there, it uses the example of "facebook" which has dependent apps like "facebook-base". If I was looking through...
To cut a long story short..... we lost Panorama VM. (ESX)i removed firewall (3020) from Panorama management and selected "disable Panorama Policy and Objets" in Device\Setup\Panorama settings.imported policy and objects before disabling. built new VM 8.10 and upgraded 3020 to 8.17.Added new Panorama and selected "Enable policy "etc... Imported 3...
Hi Team I need help to configure the syslog server in both in internal(firewall) and external server It is possible? Is there any relevant document Firewall is 7080
Hi So i have a cluster setup as a single vsysI want to introduce a vendor GP setup - i have some vendor that want remote access to equipement and I want to allow them that access but limited to just that. I want to get around the accidental giving them more acces than they need. so I though tsecond vsys. I presume I can then just set policies...
The Open Curriculum player fo Firewall 9.0 Essentials: Configuration and Management (EDU-110) Player is not playing certain videos. I have reached Intial Config > Initial Sytems Access > Configuring Service Routes and the video will not play. I can still play videos from previous sections and certain videos from future sections (i havent...
Hi everyone,I would like to set up two ipsec tunnels to the same destination. I know I could do this by assigning the tunnel interfaces different metrics in the VR. But if I do that, only one tunnel will forward traffic at a given time. In our setup traffic needs to actively flow over any tunnel that is up: Can this be achieved with ECM...
Hi Team we are unable to see the Request time out in the ping, when we ping 4.2.2.2 we can see the 26% packet loss but unable to see please find the logs above
we have a PA 3050 with decryption enabled for about 180 users, cpu under 30% most of time.Upgraded firmware to 8.1.8 on Sunday and late Monday afternoon all Https traffic failed, resolved by turning off decryption. any ideas?
Hey guys, Just set up Minemeld, upgraded to PANOS 8.0.0, running into an issue with seeting up the EDL, the source (https://minemeld.local/feeds/inboundfeedhc) being HTTPS, PANOS now requires a certificate profile for the communication to work - what shpuld be configured there, and what -if anything- on the minemeld server? Great tool by the...
When Global Protect is active (be it at home or on site) it is nearly impossible to work with 'Active Directory - Users and Computers'.It takes easly up to 10 minutes -and longer- before it is loaded and every action/click that involves loading or changing someting (for example the 'Properties' of a person) takes at least another 5 minutes. When...
when then IPSec tunnel attempts to connect after a reboot, it seems like the credentials used to connect disappears and needs to be entered in manually. We do manage this all via template in Panorama but it doesn’t looks like it is keeping the settings.
Hi Has anyone had any issues with users connecting in using global protect once they have upgraded from PAN-OS 8.0.15 to any version of 8.1? I had a change window the other night and updated to 8.1.6 which everything worked fine except for VPN access, people connecting in would constantly be prompted to type in the token passcode. We could see e...
I have created a policy rule in palo alto from INSIDE zone to OUTSIDE zone all the traffic is allowed. and I am able to ping from a inside device to a outside host however when I try to ping from outside host to the inside host it is not working. Do I need to create allow rules from OUTSIDE zone to INSIDE as well?because in ASA when we intiate t...
I have an issue with a PA.220 running 9.0.2 setup, using dual DHCP assigned outside interfaces.I can remove the "auto created default route" in the interface's IPV4 config.And also create both new default routes with metric 10 and 20. But when I try to add path monitoring to the static routes I get the following commit error:Can't get vr id(Modu...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
