General Topics

Veeam backing up a PA-VM on Hyper-V?

Hi Guys, Was just wondering, does anyone know if Veeam can be used to backup (and restore, I guess) say a VM-100 running on Hyper-V? I'm not too familiar with Hyper-V or Veeam, and just wondering what the limitations here are. Thanks!

VPN FAILOVER

there are two offices.branch and head.in head office there is palo alto networks NGFW and in branch office it is Kerio Control.in each office there are 2 connections two different ISPs.Is it possible to make VPN tunnel failover between these offices by kerio control in one side and palo alto networks in orher?

Getting all Network Objects & Addresses via API

Hi all, In working with the PAN-OS API on v7, I have been trying to figure out the appropriate way to get all of the network objects and their associated addressesF15 recognized by my firewall. Tried the following query but only seems to return an error code of 7, so I'm not sure if that means my query is malformed or if what I'm asking it for i...

USB eject how to

How do I umount my USB stick from the palo once I'm done using it as a bootstrapper? I can bootstrap just fine from the box, but for whatever reason I'm failing to find documentation on how to successfully and safely remove the USB once I'm done. I want to make sure I don't nuke a known good formatted USB bootstrapper. Any ideas? I don't thi...

What's new in MineMeld 0.9.18

Release Date: 2016-07-19 How to update: Starting from this release we have switched to a new, more reliable update mechanism where the 1st stage of the installation is based on APT. New installations will use the new mechansim. To update an existing installation to MineMeld 0.9.18 you should enable the new update mechanism running the followin...

integration with facebook

hi, I am creating a wifi network with a PA200 and the form of authentication of the network and via facebook, has anyone done this integration?

Warning possible Critical bug pan-os 7.1.12 on a vm-100 HA cluster

I just had a very bad experience with pan-os 7.1.12 on a vm-100 HA cluster. After installing 7.1.12 (upgrade from 7.1.11) on the passive node interface 1/1 passes no traffic when when i make the upgraded node "active"The network icon on the network tab shows red and no traffic is flowing on that interface, other interfaces function normal.In t...

Resolved! Multiple acitve ISP's

We would like implement multiple active ISP's. There would be two ISP with each being a different provider.It appears you can have a redundant setup with multiple ISP, but can you have two active?

Resolved! Auto-commit

there a way to set the auto-commit on a schedule?, and if i have changes of configuration pending, the autocommit will apply the changes?

URL problems

hello.although the rule is set to allow any but in request to some web-sites we can see such a problem.there is incomplete in application coloumn.i understand that it cannot pass the three-way handshake.but why only with any sites?

Why is destiantion IP missing along

Whis is it that I get deny and not-applicable and why is it that destination interface is missing from as shown below screen

Screen Shot 2017-09-05 at 6.16.28 PM.png

Unable to Update License from the License Server

Hi, I am very new to Palo Alto and trying to active licence on new PA-850. the devices are already registered on support portal using serial key and authcode. when i click Retrieve license keys from license server, z dialogbox opens and tells me retrieving licenses from Palo Alto Networks license server. Please wait... and then suddenly dialo...

Resolved! Error in EBL Refresh job

Hi guys! I have two PA-5060 in HA and in this moment my secondary is active. In secondary I've seen the following messages:EBL(dyn-block-list-ip-sadc) EBLRefresh job failed. No valid IPs found in listEBL(dyn-block-list-ip-sadc) Unable to fetch external list. Using old copy for refresh.EBL(dyn-block-list-ip-sadc) EBLRefresh job failed. No valid ...

Resolved! TAXII output deduplication problem

Hello! Could you tell me why taxii output doesn't do data deduplication? Is it normal behaviour or bag? This problem is very important for us because we have huge amount of IOCs (about 450K). TAXII output just multiply this list. Additionally after the output toked 1000000 IOCs it just stop to accept new data until deletion of some old IOCs. The...

Miner Node show error "HTTPSConnectionPools" and "ConnectTimeoutError"

I have errors from retieve feed file form any source. It shows "HTTPSConnectionPool (host='source',port=443): Max retries exceeded with url: xxxx.txt (Caused by ConnectTimeoutError (<requests.packages.urllib3.connection.Verified object at 0x7fdd988ad310>, 'Connection to souce timed out. (connect timeout=20)')) But I can use wget fil...