We have a load increase following the unblocking of an application's url. How can I troubleshoot for finding what's causing this?
I have two hardware gateways in a HA pair running 9.1.19. Ive upgraded one to 10.0 and then to 10.1.14. It now complains that the HA 'peer version is too old' and it has suspended HA. If i suspend HA on the remaining 9.1 gateway, HA doesnt activate on the 10.1 gateway. If i suspend the 9.1 gateway and try to manually "make local device functi...
Hello experts, Im wondering if Palo Alto firewalls have a build in tool to test throughput on specific interface. We are trying to use iperf on an endpoint and test channel utilization from the firewall or if possible, firewall acting as iperf server. Thanks in advance.
Hi Team, I am looking to understand the practical differences between deploying 1 unit and 2 units of Palo Alto VM-Series firewalls, particularly without any subscription licenses. I am aware that subscription licenses enable services like Threat Prevention, URL Filtering, and WildFire, but in a scenario where no subscriptions are used, what w...
The vulnerabilities which it will show in vulnerability assessment are live or any particular time the data get updated?
I was trying to upgrade to 10.2.11-H3 and when I upgraded to 10.2.0 and then I couldn't upgrade.
PAN-GPLimiter: Limit Concurrent GlobalProtect Sessions/Connections Per Unique User Hi All, I would like to introduce my Go program for limiting concurrent remote user logins in a single GP Gateway on a PAN-OS Firewall.(Keywords: Limit the maximum number of simultaneous GlobalProtect sessions/connections per unique user.) PAN-GPLimiter [ ht...
Hello team We want to migrate active directory services from onpremise to EntraID (Azure), how can we integrate the UserAgent in Palo Alto? Greetings
Hi all, i have PA 7080 that recently upgrade the firewall 10.1.10-h1 to 10.2.9-h1. Since then the percentage disk usage is increase every day for /OPT/PANLOGS. is there unknown bug for this kind of thing? how to troubleshoot in TSF for this kind of issue? Thank you
Using restapi to create IPSec tunnels for a new firewall attached to Panorama. I create the tunnel interface using restapi. I can see the new interface successfully created in Panorama. When I try to assign that interface to a Security Zone it fails with: "Invalid Object: Branch-VPN -> network -> layer3 'tunnel.781' is not a valid ref...
We have our egress on Eth1/1 with a public IP assigned by our provider. We also own a separate public subnet. We have the internet working and want to add an IPsec tunnel from our PAN to a partner also running PAN. I'm told to continue using the Eth1/1 interface. Do you see problems with this solution? Diagram attached. Eth1/1 is untrust. It h...
Hello,There are a few config differences between Active/Passive Firewalls like (asssigned Auth. Profil under Device section, login banner, snmp features)When i perform sync it shows on Task Manager of Passive Firewall it is succesfully synched. However on the Active Firewall it shows us always "not synced" here is the show high avaiabiltiy st...
Hi communit So far it isn't possible to limit the concurrent GlobalProtect connections per user directly in PAN-OS. There is a feature request #4603 for which you can vote and wait/hope that this will be implemented. If you need a solution (workaround) right now, once more the PAN-OS API is your friend. Because we (like probably some or a lo...
The command 'show system resources' lists the active processes and their PIDs and their resource utilization, but is there another command where based on the PID I can get more info about a specific process ? Similar to show jobs all shows all the jobs and show jobs id xxx shows more detailed info about the specific job based on the ID.
PC1 in DMZ Zone cannot receive IP from DHCP Server. I already allowed DHCP Traffic in firewall and also configure DHCP Relay which is ethernet1/4 interface with dhcp server ip 192.168.10.1 NOTE: i have configured vlan: 192.168.10.0/24
PavelK
on:
Throttling ingress bandwidth on a sub-interface
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
OtakarKlier
on:
Palo Alto 1420 - Invalid username or password.
