Is it possible to use DG layering to solve DaaS Zone issue??

Is it possible to use DG layering to solve DaaS Zone issue??

1. Can we create a DG-DaaS whose parent will be ‘DG-AWS_DQA’.
2. Assign Seattle DQT firewall to DG-AWS_DQA
3. Assign Ashburn n future Chicago to DG-DaaS (since it has DG-AWS_DQA as parent, it

IPSec Tunnel from vsys1 to vsys2

Hello All,

I have a design issue to mull over, and one of the options is to look at having ipsec tunnels between vsys isntances on the same box.

So, I have vsys1 as my default vr, what I may need to do is turn up vsys2 and have certain traffic in vsy

Rule base documentation

PA Best practice says you should have your rules documented on the rules and some where other than your rule base. Anyone doing that? and if so how

Last shutdown/restart date

Is there anyway to find out when a device was last shutdown?

Thanks,

Monthly Graph Reports (Pie&Line Charts)

Hi,

we have to build monthly PDF reports with nice graphs like Pie&Line Charts  for the management. Unfortunately PDF summary reports are the only one which contain graphs (despite the ACC Widgets) and are generated only everyday. Is it possible to ge

User-ID Policy not being used

We have an agentless User-ID setup. Firewall is able to pull user accounts from the AD.

User-ID based policies were created on top of IP-Based policies.

However, some user traffic can be seen using the user-id based policies, some users can be seen us

GlobalProtect Certificate auth debug

could anyone please advise a good way via cli to debug certificate authentication.

I have followed most of the log files but cannot find one related to GP authentication.

many thanks in advance...

API - list just device groups in panorama

Hi All,

Does anyone has any idea on how to list just the name of device groups in panorama using the api

if i do the following path:

https://mypanorama/api/?type=config&action=get&key=<my key>/config/devices/entry[@name='localhost.localdomain']/devic

Managing single pair of VM firewall with and without Panorama

Hi Palo Alto Community

I wanted to ask what are the pro's and cons of not using a Panorama for managing a single pair of VM-300 firewalls. From reading documentations etc, the main benefit of Panorama would only be if this was a distrbuted deployment

New Crypto mining URL category

Any plan from Palo Alto to create a new URL filter category for Crypto mining ?