UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

I have a fairly simple network setup in my LAB

Management Interface 192.168.1.1 /24

LAN Interface 192.168.100.1/24

DESKTOP IP 192.168.100.100

I have allowed all the Internal Subnet on the Management interface which is 192.168.100.0 /24 in permitted l

Perimeter FW in A/P HA directly connected to Palo Alto vwire in A/A HA

the basic topology is:

Internet FW are non-palo alto in HA A/P directly connected (no switch in between) to a pair of Palo Alto in A/A HA -in Vwire mode (no Layer 3 on the Palo Alto but in transparent-zone)

then Palo Altos in A/A HA are connected to

PA-445 stability?

Anyone else having issues with PA-445 stability? We're doing our 2nd RMA in less than 6 months on a PA-445 that just randomly restarts. It's on dual independent electrical circuits (with UPSs). After the first RMA it did it again and support said it

PAN OS - 11.1.4-h1

pa-410 lost monitor log function and ACC function

I have a PA410. After upgrading the software recently, I found that the original monitoring log has reduced a lot of functions, and even the ACC function has been lost.

I checked the website information and found that this function was cancelled after

Clean Firewall Policies

Hello all,

I am thinking of how can i clean/organize my firewall policies. Many rules seem to be mixed up within each other. Do you have any suggestions to make it more appealing to the eye? How should I organize my rules?

Palo Alto Academies

Good Afternoon, 

How do you apply for the academies listed in the early careers section of the main website?

SAML Immediately logs me off???

Hello -

I've set up SAML and by all accounts it looks like everything is working fine.  In the Monitor > System logs I see four different events: saml-client-redirect, saml-idp-activity, saml-signature-validated and finally auth-success.

The issue is

Updates required for NGFW customers of User-ID

Hi Team,

Can someone please confirm if the incoming expiration of the certificate used by NGFW, and user-ID, going to impact Cloud Native solutions as PrismaCloud and Twistlock defenders? 

I'm not sure if anything needs to be performed before the

tacacs+ authentication

Hi All,

i need to undersatnd if tacacs+ is cisco properiety , so how come juniper and paloalto use it ?

second question here , tacacs+ used mainly for cisco command authorization , so what is the need for that inside paloalto ?