General Topics

Resolved! Changing SSL Certificate on the MineMeld Docker container

Team,

Does anyone have some guidance on changing out the SSL certificates on the MineMeld Docker container? Should we modify the dockerfile to include a COPY command? Is there a way to just shunt it in via mapping an additional VOLUME during the "d

...

PAN 3020 OS Upgrade

I have PAN-3020 Running on version 7.1.4-H2, Can you please assist me which version should I upgrade ?

Have anyone tried 7.1.14 or 8.0.6. which one is more stable version ?

Configuring NAT in vWire Setup with Active/Active HA PAN-OS 8.0.5

Hi,

Anyone got experience in configuring NAT where interface are configured as vWire and HA are Active/Active?

Does palo alto dynamic IP and Port NAT keep the same translated IP and exhaust the allocated ports going the same destination before it shi

...

Download slow passing through PA

Hi All!

i have this problem: when customer downloads, it is very slow, with isp he bypassed the PA device and it was faster.

I created a new rule without any security profile to verify if it was caused by them, but customer says it is the same (and it

...

Layer 2 to Layer 3 communication on same subnet

Has anyone successfully configured an HA pair with a layer 2 interface and layer 3 interface on the same subnet?

Having issues with the communication between the devices on the layer 2 interface. There is a vlan configured and has an IP, so can see

...

ipsec tunnels freezing in PANOS 8.x on active passive configuration , when failoveris needed

- We have been having issues with VPN tunnels freezing between PA's on different sites; since PANOS8.x when a failover is done in an active - passive configuration. Current workaround is to enable tunnel monitoring with failover action. This was

...

Resolved! User-ID Agent 8.0.2-20 - Auto Update not working

Hello!

I am having an issue with Auto Update not working. I have the agnets installed on three seperate servers and have had to hand-jam the rest of the Domain Controller's in order to get them connected. I've only put in 1/3 of them but was wanting t

...

Lock Users Ability to Create Shared Objects or Rules

Hi. I would like to prevent users from creating Shared Rules or Objects via Panorama. Is this possible? I do not want any objects shared across all Device Groups and would like to prevent it happening through oversight by a user. Thanks

BGP

hello i am new to palo alto

i recently configured bgp on my palo alto pa 500 device and my bgp peer is getting connected and then after a minute it gets disconnected and the bgp state becomes active. also i am using md5 key for authentication. could

...

Customize email alerts

Hi,

I question is it possible to do customize the alarm email which I activate it in the log forward.

Thanks a lot for your help.

Thanks

Martin

Resolved! Best practise For TAP Mode

Hello Brothers,

Plz i want make a POC with one of our clients, but i need to know what's th best practise for putting the PaloAlto in TAP mode !!

i mean:

1-what's the rule policy that i must create ?? must enable all security profile ?

2-must make dycry

...

Resolved! Copy group of apps from one device to another - small CLI problem

Hello

I'd like to copy one application group from Unit1 to Unit2.

On Unit one:

configure run set cli config-output-format set show application-group WiFi-apps

It gives me somethning like:

set application-group WiFi-apps members [ adobe-update apple-push-...

Resolved! GlobalProtect, XAuth client, issues with routing multiple subnets

I'm probably missing something simple, but I can't figure out what.

I have GlobalProtect Portal setup on the datacentre (DC) firewall. I have GlobalProtect Gateway setup on the office firewall, with XAuth enabled.

I can connect to the Gateway using

...

Resolved! Failed Install dynamic update

Good Morning,

Last week, one of our Firewall had a power failure, after recovering, we have seen that dynamic updates are downloaded but not installed correctly

I have reviewed the "less mp-log ms.log" file and you see the error is as follows:

rpmdb:

...

Resolved! autolock

It was recommended that we turn on autolock so that people would not step on each other commits so we did. We had a non admin user create a filter, it requites a commit and he has no admin rights to commit. So the firewall became locked and no one co

...

Discussions