Two separate PA one the same ISP on both location

Hi, we have two PA fws around 1km in bettwen. They are connected with dark fiber so users on both side can see each other.One the same ISP on both side, and public IP address range of /28 addresses. We are using that public IP address for several services (each service has its own public IP) and want to configure both PA so when PA on primary ...

natted public ip

Demo Lab Environments - No Longer Available

I was going to review some Panorama setting options in the demo environment and the demo environment is no longer available. Did Palo Alto decommission these labs and was there any communication about it? If so, can anyone provide the communication? Here are the labs sites I have tried to reach and they just timeout. https://us1.demo.paloaltonet...

Verify and test backup firewall

Hello How we can verify and test the backup file ?

List of domains to allow for in-flight WiFi

Hi all, I've been working with a number of customers lately who have been trying to gather a list of in-flight wifi domains that they need to allow as GlobalProtect Enforcer exceptions and I thought I'd share them here. I'd also ask that you please post any additional domains or use-cases that are missing and I'll be sure to update my list. No...

Evaluation ESXi shutdowned

I testing Evaluation for ESXi PA-VM-ESX-10.2.5.vm_eval.ovaSuccessfuly,installed.But, after PA-VM login: indicated, I cannot login in entering default admin / admin.and,a few minutes later,PaloAlto-VM is shutdowned. Even I tried several times,it occured it everytime.Please help to address this issue.

Static default route setup for DHCP client WAN interface

Hello All I would be much appreciated if you can help with setting up my static default route which I believe is the culprit why I'm not able to route data traffic to internet. eth1/1: WAN interface, the interface is set as L3 untagged, configured DHCP-client for IPv4. ISP assigns a new IP every 10-12 hours and the bridge-mode cable modem...

Limited CLI Rights

Howdy All! We are in need of finding a way to give a help desk individual limited access to the CLI to run a Python script to clear addresses from the DoS Blocked-Table. The 2 commands it is running is the debug dataplane show dos block-table debug dataplane reset dos zone <zone> block-table source <ip address> What I have foun...

double nat

hello, my palo alto pa440 wan is connected to another firewall who is connected to the isp with a public ip natted to my firewall.i have to setup an ipsec tunnel i don't understand if i have to use the public ip or the vlan ip as local peer ip address thanks

How do I optimize Palo Alto firewall rules for performance while ensuring high-level threat protection?

Hello, I am new here, How do I optimize Palo Alto firewall rules for performance while ensuring high-level threat protection?

Microsoft Directory Services/ms-ds-smbv3 - Virus/Win32.WGeneric.yurld?

We are see numerous alarms from our SIEM from our Palo Alto firewall. Here is a copy of a scrubbed log message below. When asking the user about their activity, they only RDP'ed into various servers from their laptop via the Globalprotect VPN for remote admin work and ran a batch file that re-maps drives. Additionally they noted browsing to \\&l...

Need assistance with troubleshooting Routing between 2 VR's that are connected via BGP

Hi, We have two VR's setup NSWHealth_VR and HSP_VR and there is BGP connectivity between them. We can see routes are exchanged between them. However, for one particluar route eg: 10.24.x.x/13 on HSP_VR we can see it on the loc-rib but not on the RIB-out. All other routes are working fine. Only this particular subnet is having issue. We have chec...