setting up multiple internet connections

Hi everyone. I have a PA-220 firewall. It is currently connected via interface 1/8 to an internet connection that I will soon have to discontinue, and which I will call GW1 here.
At the same time I

No logs in the monitor > traffic tab?

Hello All,

1.) I have just installed Palo Alto 7.1 in Eve-NG, and  made two interfaces as Vwire with zone Trust and Untrust.

2.) I am able to access access everthing (e.g. internet, ping, etc.) hence policies are working fine  as I have created a polic

Best method to permit SAML auth and Radius for Globalprotect at the same time?

Greetings all, I hope you can help me. 

I currently have Globalprotect set up on a single firewall - both portal and gateway.  We're using Radius for authentication, it is working well. 

We want to transition to SAML.  For testing purposes, we'd like

Failed to generate selective push configuration. Schema validation failed. Please try a full push

Update Panorama

Did not found any email to write Palo alto PAN-OS developers that hence writing here on feedback on palo alto Panorama update.

After finishing update panorama then against the version we update it gives option of "Re-Install" by clicking on that it

PA-460 Upgrading from 10.2.3-h9 to 11.2.0

Hi Guys!

I was in my way to upgrade my PA-460 from the version 10.2.3-h9 to 11.2.0, i tried to use the Validate button, to take a look at the upgrade path, but i can't see any result, but i still have my doubts, 

I saw that in the Documentation s

URL Filter Inline Categorization SLOW/DELAY - troubleshooting?

Since updating to PAN-OS 10.2.8 (and subsequently 10.2.9-h1), we've had numerous complaints of slow website access.  Outside of the firewall it works fine.

I've since narrowed it down to a problem or issue with the URL Filtering Inline Categorizati

IPSec IKEv2 multiple events per second

Hello everyone,

I see many events per second for a site-to-site IPSec tunnel and am unsure if it's normal. The below events have a severity level of informational but go over and over in a second.

My question is, is it normal? if not, where should

BGP Advertising prefix to same AS it was learned from.

I'm working on a VRF-centric DC model that utilizes a PA as the firewall platform between VRFs. One of the snags I'm hitting is that if a route is learned from R1 on an AS (say 65001), and is advertised via eBGP to the PA (AS 65002), the PA won't eve

Unnown-TCP application "commvault"

Hi Guys, 

I hope you guys can help with classifying unknown traffic. 

I have read many forums for this topic none of which answer my specific question. I understand that should create a custom app if your application bespoke and it is unlikely that a

block / allow url list

Hi Team,

Is there any way to get the list of URLs that have been blocked by the Palo Alto firewall?

Deny any any ruleset

So if you accidentally put the any any and deny ruleset at the top of the panorama firewall and it wont let you in through the web interface. How would we be able to get into the panorama to change it back to the previous configurations??

Anydesk issue.

Hi everyone!
I have some issues with anydesk application. It has ssl issue because of decryption, I think.

I've added *.anydesk.com ind 'SSL decryption exclusion', but it didn't worked.

Maybe some of you have faced such kind of issue?

Thanks in advance!