Active-passive HA with BGP to 2 ISPs, BFD + graceful restart

Hi, Anyone ever configured BGP + BFD + Graceful restart, trying to do this setup but not sure if there is any timers to ensure below. Can't find anywhere on any knowledge base. 

1. when ISP link go down - BFD ensure seconds failover, ISP gateways are

PA firewalls and HA across different GEO locations

Hi Support,

We have Client in Cork want to know about the FW HA across Different Location.

• What are requirements for having fw cluster spread across different GEO locations (latency, delay, etc)?
• Is this recommended at all by PA? If yes, what kind of

Send XSOAR audit logs to splunk

Is there any documentation or can someone guide sending logs to splunk from XSOAR? Both are SaaS products.

Cortex XSOAR #Splunk

Firewall integration to Panorama with initial/default device Post-Rules

Hello, firstly, apologies for the long winded background info to explain my requirements !!

I've a large project with hundreds of Firewalls to deploy. All initial base-configuration and Panorama-integration will be completed via the use of various

If User got Text pad block popup while opening , what should we ask to share?

I got a mail from user that one application (Textpad) is blocking by XDR .  

what should we ask the user to share?? For any application??

GlobalProtect on Mac 13.4.1 ("msgtype = hip" rather than "msgtype = portal")

I'm looking over the log files of a Mac (v13.4.1) that cannot connect using GlobalProtect (v6.1.1-5). I'm comparing it to another Mac running the same OS which works, and in the PanGPS.log files I'm seeing this difference:

Working:

Line 53: P10741-

Management Interface down

Hello,

i have the problem that I have two PA-445 as HA clusters where the management interface does not have an uplink.
I've already tried several cables and switches, but unfortunately I can't get an uplink on the interface.
There is no spanning tre

PaloAlto License Expired and Dynamic Updates

Hello.

The Palo Alto license has expired.

I want to proceed with the dynamic update, but it's failing.

Is there any way to proceed with dynamic updates while the license is expired?

Removing Previous Commits on Panorama which are Stuck

Is there a way to clear old commits on Panorama which have never succeeded? Our firewall which we were committing to dropped off the network during that time and the commit is still pending. 

Any CLI commands to clear this other than restarting the m

SFP Compartibility for HA on PA - 850

Hi Support,

I have cisco sfp model no : GLC-LH-SM, i would like use it as HA1 and HA2 for PA-850 on both the end of firewall.

Would like to know weather it will work or not

Personal VPN Services thwarting Company Policies

Downstream of our PAN's, we have our Citrix environment.  This environment includes some Netscalers that have a nice feature in that they provide in their SYSLOG, two fields named "ClientIP" and "NATIP".   This proves quite useful in that while the C