How to upgrade a Firewall out of support ?

Hello

We have an old PA220 for lab testing purposes. The firewall is currently running the 8.0.0 ver. We also have PA850 but in the support site I can only see the software download option for the PA850 and not for the PA220.

Can anyone tell me how

Expedition migration: Old paloalto NGFW (Panorama managed) to New one

Hi all, i'm trying to figure what are the correct steps to migrate:

Paloalto Cluster 3060 (9.1) Managed by Panorama (10.1) to a new Paloalto cluster 3410 (To be managed by Panorama).

This is my starting idea

1) Setup the 2 nodes in 1 HA Cluster (Setup

CAPTIVE PORTAL TIME-OUT

SETUP: PALO ALTO connected to ACTIVE DIRECTORY for groups
CAPTIVE PORTAL ACTIVATED 
idle time-out 500minutes
timer: 600minutes

CLI> show user ip-user-mapping ip x.x.x.x

SCENARIO 1: 
user log in to PC > mmp1234
CLI> show user ip-user-mapping ip 1.2.3.4.
Ip ad

PA-5020 product HW and SW EOL dose it effecting configuration of new policy after 30/1/2024 can't commit

hello, i've some question about PA-5020 product which is HW and SW (8.0.1) already EOL, is it the cause that i can't configure policy after EOL ? but the running policy still applicable. here is come information about what happen to me

everything i

I have to know PA-220 & PA-820 device End of life support details

I have to know PA-220 & PA-820 device End of life support details

Credential Theft Protection and SSL Errors

I am currenlty doing a proof-of-concept test for the Credential Theft Protection feature. SSL decryption is configured and working. I can get the system to re-direct to the Anti Phishing Continue Page. However, that page uses the SSL cert associated

Throughput means through show system statics session.

Hello all,

I checked the throughput information of CLI > show system statistics session as part of a way to check real-time traffic volume in Paloalto during migration work.

There was an inquiry from the customer about exactly what the throughput figu

Prove the firewall innocent?

Hello,

We have communication from load balancer to 2 servers called S1 and S2.

Both S1 and S2 have same Windows Server version and have exact same patch level.

Both serve a web-service hosted on their IIS.

On Palo firewall, we have App-ID based rule

allowing MS product activation and denying web access

I have a network that I want to allow MS product activation to work but web browsing and other internet activity to be denied.

I have two main security policies that apply just to this network although DNS and ntp is also allowed:

The first one is an a