PA-VM MGT not reachable in GCP.

I have PA-VM deployed in GCP with SD-WAN. PA-VM sits behind SD-WAN for intranet traffic.
attached image is how my setup looks like .

Query.

I can't reach firewall mgmt via internal network (access via Public IP to mgt Public works fine) . everything o

Converting SonicWALL DNAT configuration to Palo Alto DNAT Configuration

Hi to all the expert,

I am new to Palo Alto firewall. I need a guidance from the expert to guide how to converting SonicWALL DNAT rule to the Palo Alto DNAT rule.

SonicWALL DNAT Config:

Original Source: Any

Translated Source: Original

Original Dest

Long commit times when changing DNS settings

On an HA pair of PA-460, the commit time is usually around 60 seconds, when changing the DNS settings to something that is not reachable, the commit time changes to 10 minutes+. I've tried replacing the primary but the issue is the same. When I looke

how to configure WAF in on premise PA

how to configure PA Model Type 3410 for Web Application Firewall (WAF) 

Unable to discovered ICMP and SNMP from solarwinds. Discovered in Solarwinds as ICMP Only.

dc1-fld-sdw-1a
dc1-fld-sdw-1b
Unable to discovered ICMP and SNMP from solarwinds.
Discovered in Solarwinds as ICMP Only.
we have checked there is no firewall block and verifed SNMP2 configurationsits looks good but unable to discover ICMP and SNMP

Serial

Is there a way to test remote host ports from the palo alto firewall?

Hello Palo Alto Team,

I new to Palo Alto and loving it but I am looking for PAN-OS cli commands similar to telnet, nc (netcat) or curl etc.. I have seen there is an option to do ssh source port (the scp command also supports this), can this replace

Importing list of Blocked IP's and URL's into EDL

Hi,

  I want to be able to quickly blacklist a bunch of URL's and IP's from internal uers going out to the internet. 

  What is the best way to achieve this? Would I just place them all in a file text file, and just import them to a custom External D

Support wait times and SLAs

I am in the call queue since 3 hours. Called in yesterday and left a call back number, but never received a call back. Does anybody have a similar experience lately?

PA-440: Bottom Face Screw Mounting Footprint

I am looking to add the PA-440 to the Elevator Model I am working on, but because of limited real-estate, we do not have room for standard 1U server rack, and have to create a custom enclosure to house the firewall.

I am looking to mount the PA-440

Equipment: PA1410 (PAN-OS 11.1.4-h1) Threat Logs is not monitored every time

Equipment: PA1410 (PAN-OS 11.1.4-h1)
Issue: Some threat logs are not seen in output.
Details:
・The vulnerability protection alert test was performed 4 times on PA1410 with reference to the following page.
https://knowledgebase.paloaltonetworks.com/KCSArt

SSLVPN FOR Certificate (Generate)

Hi 

I try to establish SSLVPN LAB

But,I don't understand bottom Certificate Attributes function

the different between having setting and not setting 

Best Regards

Export Codes - HS/ECCN/CCATS

Hi, 

I'm looking to obtain the export codes for some Palo Alto Network products.  Can anyone point me in the right direction to obtain these?

Thankyou, 

Palo HA with LACP to Cisco Stack Switch

Hello Everyone,

Im trying to find a Palo KB that talks about recommended/best practise when setting up Palo HA with LACP to a stack switch (e.g. Cisco stack). 

Can anyone guide me on this ?

For some background, we are weighing the Pros and Co

PA-445 stability?

Anyone else having issues with PA-445 stability? We're doing our 2nd RMA in less than 6 months on a PA-445 that just randomly restarts. It's on dual independent electrical circuits (with UPSs). After the first RMA it did it again and support said it