Having issue with management profile to be applied to Outside (public) interface.

We have /24 public ip allocated to the main office. So we have pretty wide range of pubic addresses to use while testing configuration.

I have been configuring Palo Alto firewall for new migration project. 

Currently managing Palo Alto through dedica

Issues with pushing out 10.2.9-h1

There is not a community discussion for issues implementing 10.2.9-h1

We have a maintenance window to push out 10.2.9-h1 Thursday evening and with recent issues with 1.2.7.h3 and other roll outs i am starting this thread for the community.

MLAV cloud error, all machine Learning engines stopped

Received this high-alert message on a PA5220 (10.0.8-h4) this morning, "MLAV cloud error, all machine Learning engines stopped". Has anyone else received this message before? If so, what steps should I take to troubleshoot and resolve the message? Th

snmpd.log error Solarwinds monitoring PA1410

I am investigating an issue with Solarwinds monitoring a PA1410 , in the snmpd.log i see the following :

2024-07-18 09:39:45.403 +0100 Error:  pan_snmputil_sysd_fetch_modified_obj(pan_snmputils.c:1528): Unable to fetch sw.cmd.*.dp*.counter={'interf

SYSTEM ALERT : medium : MLAV: Unknown error

Repeatedly receiving the above alert on 4 separate PA firewalls throughout the evening, can't find much information online relating to it. Has anyone else received this message before? If so, what steps should I take to troubleshoot and resolve the m

GlobalProtect Gateway with Multiple Client Authentication Config

Hi there,

I have multiple client authentication configurations set up on my GlobalProtect portal which use the same OS type.

Order is as follows:

1 - Windows OS with local auth on the firewall.

2 - Windows OS with LDAP auth.

What i want to achieve is i

Palo Alto Offering for non profits

Hi, I am curious why palo alto networks does not have a "security for good program" or donation program for non profits?

Palo Alto is a large company and I think it would be an awesome move for them. 

Some of the companies that have one are

Cisco and

Can't push after adding a new subinterface to newly created vsys

Hi folks,

I newly created a new vsys for my ha-pair in my panorama. I have also created a new device-group but only use a single template for both vsys.

I've tried to create a new subinterface in my new vsys. The interface is already connected to m

PA-445 Passive Device LED status

Dear Team,

I noticed something unusual during my testing.

PA-445 was configured as HA.

The front LED of typical firewall hardware is orange when in the passive state.

However, for the PA-445, both Active and Passive Devices are green.

As a

Starting from PAN-OS 11.0 version, is the only interface link duplex set to auto?

Dear Team,

I noticed something unusual during testing.

Starting from 11.0, the only option for interface link duplex setting is 'auto'.

I've checked the changes and restrictions in 11.0, but there are no explicit details about them.

Is this b

List on compatible QFSP for 5000 series

Hi,

Any compatible list of QFSP 100G in Mono or Multimode on LC?

Thanks.

CLI find objects by wildcard search

PANOS 10.2.9-h1.   

Is there a way to use the CLI to wildcard search for address objects either by name or IP address?   The goal is to take those objects, manipulate them in a known way, and then re-inject them.  Name would be preferable.  

Assu

moving palo alto firewall management to a different domain

We have a domain that is going out of commission, so I need to move the palo alto firewall management software to a different domain. Is there a safe way of doing this? 

PAT/NAT rule not working

Hi I am looking to create a PAT for an internal server which will use the /30 public IP of the Palo outside interface and port 16385 to be reachable. The below scenario:

PAT/static NAT towards the private IP of O-IntercomSRV-01 (the intercom server