Hi Experts, Can someone please assist on the NAT order considers in PA firewalls. Is it considered from top-down architecture or Twice NAT (NAT'ing both source and dest) takes precedence over source or dest NAT. ThanksSrinivasan
Hi community, Which partitions are used to store the PAN-OS files? fw> show system disk-space Can unused PAN-OS files be removed from the CLI? Is there a KB available with information on how these partitions work, and what they are used for? Is there a way to access the shell mode from the CLI? Thanks.
Hello,We have a problem at one of our new locations with the Edge Browser when using SSL Forward Proxy (PA-220).The problem is as following: When we activate the SSL Forward Proxy, the Edge browser takes very long and sometimes even disconnects when trying to open a normal webpage with TLS. Chrome, Mozilla & Internet explorer are OK. Certifi...
I had try to factory reset, but it keep showing warning : NEW DISK CONFIGURATION REQUIRED, then rebooting. ------------ NEW DISK CONFIGURATION REQUIRED ------------Please wait while the new disk(s) are setup.The system will reboot automatically when completed. Jan 23 15:13:17 Error: sysd_sync_connect(sysd_sync.c:210): connect()::(errno: 11 1) C...
We are opening a new branch office and recieved notice that the carrier will not be providing a router and that it was our responsibility to perform the WAN to LAN routing.The carrier provided a layer 3 WAN block and a Customer Useable block containing 6 IP addresses.If I configure ethernet 1/1 with the WAN block IP address I can send/receive tr...
Hi all, I am new to the community and I was interested in learning more about Palo Alto. I wanted to ask about a Palo Alto 5250, PAN-OS 8.1.3 In the ACC section, tab "Network Activity" I do not receive information Only one "Report Error" message appears Any suggestions? Regards
Curious to know when we run the show running resource-monitor we see below output core 0 1 2 3 4 5 6 7 8 9 10 11 As per my understanding cires do the packet handling as common thing among alldo they also have some specfic functions also?
I am having trouble with the following. Cisco ASR router with IP of 10.1.1.5 plugs into Cisco 9K switch into port eth 1/3, eth 1/3 is configured the follwoing way. interface TenGigabitEthernet0/0/1 description LAS-9K-2 ip address 10.1.1.5 no ip redirects no ip unreachables no ip proxy-arp ip nbar protocol-discovery load-interval 30 cdp enableen...
Hi All, We want to block skype file transfer from our users. Checking on the application-list, I can only see Skype and Skype-probe.Here are my questions:1. Is there a future plan to add additional skype sub-applications (skype-video-call, skype-file-transfer, etc.)?2. Is there a work-around to block skype file transfer? Thanks and regards,
Hello all, Has anybody created or know a way to mine the IPs published by a ASN, f.i. Google ASN?' BR,
May I know where is the document that refer to this? Can I even ping the mgt ip via trusted port? Thanks all!!
Hi, I have read a few articles regarding internet redundancy using a primary and backup ISP link on a single Palo but can someone please explain (if it's possible) how one might achieve redundancy using a primary ISP link on 1 Palo with failover to a backup ISP link on another Palo at a remote WAN site connected to the primary site via L3? Chee...
I've had an odd issue crop up.I have two PA-820's in a HA cluster.Everything has been working fine for over a year, no issues at all.Starting Friday afternoon of last week, I began getting alerts from the passive device.The alerts are for being unable to load threat protection updates and being unable to connect to the user ID agent. Nothing at ...
Hello, We are using PA-VM-100. We are planning to upgrade from 8.0.5 to 8.0.13. Will it impact in any aspect if we increase the disk space of a firewall server by reducing the retention period of log files, such as Threat report, traffic report etc.?
Hi We currently have 2 PA 500 which are currently configured for HA. But don't think its currently setup correctly.This is what I can find regarding as to what we want to achieve. Active passive with OSPFhttps://knowledgebase.paloaltonetworks.com/servlet/fileField?entityId=ka10g000000CyRYAA0&field=Attachment_1__Body__s But the above article...
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
