Address Group and Tag limitations

The necessary firewall rules for each application are defined by labels.
If a workstation needs access to it, the label is requested and assigned (XML-API), so each Workstation has its own set of firewall rules. I tried implementing this requirement

Custom BIOC Rule won't apply to Prevention Profile

We are attempting to make a custom BIOC rule to prevent the use of certain softwares on our servers. Applying the BIOC to a prevention profile works, except for when we add any exceptions. Say we are attempting to block Google Chrome on servers, we a

Migrate PA-3260 cluster to 3420 (managed by panorama both)

Hi, i have to do this migration.

So my steps will be:

1) Install the same version 11.1.x as the old cluster.

2) install licenses

3) add new cluster tu panorama

3) add the device group old cluster to the new one.

5) clone template old cluster to the n

PA VM

how to download PA VM for practice purpose. 

Route & Path Selection

I have a Cisco backround & I am currently studying Virtual Routers & Static Routes in the PA 8.0 admin guide.  I am trying to understand how Metrics are used in the firewall because it sounds like Administrative Distance does the same thing.  Can som

Requests from internal company DNS to Root-servers.net

Hi, i'm observing in the fw logs massive requests from company dns servers to root servers (53 udp).
These servers are generally named *.root-servers.net.
I know that our Dns are configured to interrogate our provider DNS.

Do i need to allow communicati

Active - Active firewall deployment across two data centers

Hi All, 

We are exploring the firewall deployment options for one of our customers who have a requirement to stretch few VLANs across 2 data centers most probably using VXLAN/EVPN. The options currently being explored are:

1. Active-Standby firewalls

Palo Alto Webinars

Hi,

I've attended two Palo Alto webinars:
- PAN-OS 10.1 Expert-Led Webinar on the 10th of February
- Live upgrade demo on the 18th of February

I was told we would be given the video recordings and slides from these webinars, but I don't know where they a

Request for Official Information – SKU Change from INTEDGE to CORESEC

Where can I obtain official information from Palo Alto Networks regarding the SKU change from INTEDGE to CORESEC?

Administrator account issue

PA-5050 device with software version 4.1.6.

In all my devices except one, I was able to create a new Administrator account (Superuser) with password and log on with the account to administer the device.  The problem device allows me to create a new ac

DHCP Server - Conflict IP's

Has anybody else experienced an issue with their DHCP server leases being constantly filled up with conflict IP's by one device?

There is no pattern to which device will do this, it seems at random. I'm on version 11.1.6

Any guidance would be much