configure ha in different locations

hi,

I have 2 palo alto and I have them in different buildings and I want to set up an HA between them how can I do it without just pulling a direct cable I want it to go through the network infrastructure.

Kind regards

Tunnel Interface IP Address Requirement

Hi everyone!

I am a new learner for Palo Alto 

 I want my Remote Network to reach my HQ Network via GP.

I am kind of confused whether when I am going to use IP Address to my tunnel interfaces, either on IPSEC site to site or Globalprotect depl

FW specific rules from the Panorama shared policy

Hi All,

Using Panorama (10.1.x) with a number of managed FWs
we have a shared pre policy, parent pre policy and child policies with pre rules configured within.

goal - in event of a security incident on a branch location we want to have a pre-defined

PAN-OS 10.2.11 Device -> Setup page missing

Hello!

I just upgraded my PA-220 to PAN-OS 10.2.11 and the Device -> Setup page is missing. (See attached photo). Has anyone else run into this or is it a browser setting on my PC?

Replacing the FW serial number in Panorama with a new one

Hi,

What is a reliable way to replace the FW serial number in Panorama?

We had a problem uploading a new license because the FW serial number did not match. Palo Alto TAC solved the problem, but the serial numbers changed, which caused the FW to

PA460 app summary no data to display

Hi all,

PA460

Version 11.1.0-h2

i need some advise regarding the issue i am facing right now in monitor -> app scope --> Summary  [Top 5 Bandwith Consuming Source (last 60 Minutes) ] Showing No Data to Display but the other column is displaying w

multiple virtual routers - routing between rfouters

Greetings,

I have a network with 30 PA-440 using the native SD-WAN plugin and currently I'm using a single virtual router for all sites using SDWAN and also off to my ISP's (1 using static route, 2 using my private ASN).

I am migrating to a public ASN

root partition available space reducing

I have a VM-500 ,PANOS-10.2.8-h3.root available space is decreasing and is now only 3%.

I usually run below commands which sometimes can get me 1 or 2%. I have aggressive cleaning at 90% enabled. Why is creeping to 97% even with aggressive cleaning e

App-ID 'hotmail' false positive?

Hello,

after our recent newsletter distribution, we now see lots of blocked App-ID 'hotmail' in traffic directed to our web servers. Those are requests to HTML resources (images) just referred to from Hotmail website, most likely Hotmail users reading

AOL Mail

Hello,

Has anyone been experiencing any issues with using AOL Mail through a PAN device since last week? I'm assuming AOL changed the behavior of their webmail site and now sections of the portal are not available - such as the inbox.  Errors also pop

SYSLOG Issue after upgrade

Hi Team,

I just upgraded my PaloAlto to 11.1.3. after upgrade we faced issue that syslog receied delay log. 

"debug log-receiver statistics"

Logging statistics
------------------------------ -----------
Log incoming rate: 448/sec
Log written rate:

AWS NGFW currently at 9.18 and need to upgrade to 11.0.3-h5

Greetings, 

What I would to try is creating an new instance for the firewall on 11.0.3-h5 or whatever is available in AWS.   then import my 9.1.18 configuration.  Or would it be better to import device-state?  or should I just follow the normal upgra

What encryption is my SSL connection using?

We're on 9.0.9 and want to turn on the feature allowing users to connect to GlobalProtect using SSL if there is a need.

Is there anywhere in the Monitor tab you can look to find what encryption is used for a particular users connection?

I read this w

What's the difference between custom URL filtering in security policy and in URL filtering Security Profile?

Hello, Guys, I have one question.

First below is the packet flow from "Packet Flow.pdf" document. According to this document ...

In the red square, before PA make session table, it checks packet's ip and port (like the legacy L4 firewall), and then aft