Resolved! FQDN Policy

Is it possible to use a wildcard when creating a policy based off of a fqdn?

Thanks

Resolved! sflow traffic denied from certain IPs even though rule allows it

I'm seeing an odd issue where I've got a rule allowing sflow traffic coming from a WAN zone into my server zone where my monitoring servers sit.  Most of the traffic passes as it should, but there are random subnets where the rule is being denied wit

Resolved! Panorama VM 8.1.5

Hi

I have just upgraded to 8.1.5 VM of panorama.

I have rebooted a couple of times, but my console (of the vm) is getting filled up with 

INIT: id "s0" respawning too fast: disabling for 5 min

I have logged it with support - but the engineer doesn't r

Resolved! Upgrade path to 8.1.6 from 8.0.14

Hello can you advise on the recommended upgrade path from PAN-OS 8.0.14 to 8.1.6 ?

can i install directly the 8.1.6 version or do i have to install first 8.0.15 ?

so it is  8.0.14 -> 8.0.15 -> 8.1.6 ?

OR

8.0.14 -> 8.1.6 ?

OR

8.0.14 -> 8.0.15 -> 8.1.0 ->

Resolved! Single Sign on configuration

HI every one ,

 any one help me to configure signle sign on in palo alto . as per my expirence we use to have agent in fortinet for sso. but in palo alto, i never configure SSO before and i,m not able to find any SSO Step by step, 

We have Active dir

Resolved! Commit Failed and Unable to Restart Device and Management Server

On PA  200 running 8.0 unable to commit it shows failed.

Running and candidate config is syn.

1>>Did Commit Force no luck

2>>During Commit ran the below command it state of init does not change 

show management-clients

Client PRI State Progress
--------

Resolved! PA to Cisco ASA Site to Site IPSEC with source as user id instead of IP address

Need to know  is it possible to use Site to Site IPSEC with Cisco ASA and use USer id  instead of source address in the Palo Alto?

What we want is instead of source IP address we can config the user id.

Resolved! No Traffic Logs in CLI and Gui

No traffic logs in cli and gui

last log i see is midnight 2AM MST

debug log-receiver stats all logs incremented

tail mp-log logrcvr.log shows

2019-02-01 02:58:42.332 -0700 Error: _write_task_disk_flush_process(pan_logdb_writer.c:1501): Error executi

Resolved! Failover PPPoE Connections

We have PA-200s and 220s that we provide to our branches that have their own internal range that gets advertised into our network through global protect. They all have their own internet connection but if that goes down then we have no redundancy in

Resolved! URL Filtering with Any Any

Hello all,

We are preparing a firewall in which the first security rule has to be :

Source and Destination: ANY

From TRUST Zone to INTERNET Zone. 

Application and Service: Any

And then there is a URL Filtering profile attached to the rule.

So will this r