User-ID Hierarchy Design

So we have our device groups laid out like this, there’s more but you get the idea. Shared > Regional > Site.

The devices are members of the Site device group, and have a master device allowing me to push User-ID rules down through Panorama. If I want

problem with IP helpers after migration

We're migrating from a PA-2020 to PA-3020.

PANOS 6.1.12

Config migration went fine. And most functionality is ok on the new device.

However our IP helpers don't work anymore. We use them on tagged subinterfaces.

All subinterfaces on one interface connec

[MAC Book]OSX USB Serial can't been connected to PA Series when maintenance

Hi all

I am using mac os and I installed usb seria dirver on my labtop.

The usb serial is from Prolific.

when panos is booted and login, that is working reponse properly but when I enter the maintenance mode, I couldn't choose menu[factory reset

User-ID inconsistancies

Hello,

It's not the first time that I am facing this kind of issue :

Context : PaloAlto FW with (multiple) userID agents in a single (or multiple) Microsoft domain and user id based security policies.

The User ID feature seems at a glance to be worki

Application Command Center empty and risk factor set to zero

Suddenly the Application Command Center  became empty showing " no data to display" and risk factor set to zero.

after debug software restart log-receiver on the cli the logs started to repeear but only for a few minutes then disappeared again.

Any sug

No Block Page when accessing Blocked Categories over HTTPS

Hi there,

I have recently noticed that when I test access to URLs of blocked categories over HTTPS, I do not get a 'Blocked Page' display from the Palo. It just says the Page Cannot be Displayed and show the connection was reset.

The URL filtering log

Question about vlans/Router on a stick.

I'm looking to configure a Palo as a router on a stick for a site to replace a decrepid Cisco 1811r router. The only printed information I can find is a 4.x document with pretty dissimilar UI images.

I've configured mutliple subinterfaces underneath

Panorama and Scan Type threats

Anyone know if Panorama is supposed to show Scan type threats in the Threats or Unified views under Monitoring?  I'm investigating why some of our Autodesk software on campus is having problems reaching the licensing server... Panorama didn't show an

User-ID mapping when host has 2 interfaces

We've run into a problem which I understand, I'm just not sure how to fix.  A user on her laptop logs into the domain while her laptop is docked, so UIA has her ip address mapping to the wired connection.  Later, she undocks and flips over to wireles