Failed to install PanOS_3200-10.2.9-h1 with the following errors

Hi Guys. 

i have PA-3220 need upgrade to 10.2.9-h1.   but failed.  see bellow error msg.   try to reboot .  no luck. and try to downgrade.  also failed.    can someone help for this issue? thanks very much. 

Loading into software manager
Failed to

GlobalProtect expand IP Pool

We have an existing GP setup and it's working, but the IP Pool is set to a range of IPs 192.168.10.10-192.168.10.100 instead of a subnet 192.168.10.0/24.

I want to either expand the range or change it to a subnet.

I tested this by expanding the r

Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com

Getting below alert from the hardware firewall.

"Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com:443"

Followed the below document but no luck.

Do PAN TAC even read the content of the ticket?

This has happened more time than I can count, and I have Platnium support.

I work in the US Eastern time zone 8am-5pm ET and every time when I open ticket with PAN support, I always put in this line at the beginning of the ticket:  "I would like to

show routing route destination output

Hi all,

there is something which is confusing me when I want to check an entry of the routing table.

If I'm looking for an entry of my routing table with:"show routing route destination x.x.x.x/x" and the route is covered by the default route, the outp

Help Allowing VDI Connections

AT&T has provided our users with virtual machines using VMware Horizon Client.  However, when in the office, our users cannot connect to their VDI machine.  However, when external, using our GlobalProtect VPN, they connect successfully.

Error: Load

Doubt about costomize config log paloalto

Hi team

The security auditors ask us if in the Config Log it is possible to have an additional field in the log that links all the events of a rule change with a ticket id external to Palo Alto.

That is to say that in the attached logs an additional

Autocommit loop error and interfaces 'connected but down' after upgrade from 11.0.4-h2 to 11.1.4-h1

Hi All,

I already posted this in "Discussions > Network Security > Next-Generation Firewall Discussions", but I'm unsure if that is the best place for this issue. 

https://live.paloaltonetworks.com/t5/next-generation-firewall/autocommit-loop-erro

questions while creating first IPsec tunnel

We have our egress on Eth1/1 with a public IP assigned by our provider.
We also own a separate public subnet.
We have the internet working and want to add an IPsec tunnel from our PAN to a partner also running PAN.
I'm told to continue using the Eth1

Can't add tunnel interface created by restapi, to Security Zone using restapi.

Using restapi to create IPSec tunnels for a new firewall attached to Panorama. 

I create the tunnel interface using restapi. I can see the new interface successfully created in Panorama. 

When I try to assign that interface to a Security Zone it fail

Veeam Server high CPU Cortex XDR

Hello,

We have a server with Veeam Backup, and we are noticing high CPU usage from Cortex.

We have seen that some exceptions might need to be applied:

https://www.veeam.com/kb1999

Would this apply to Cortex?

Best regards.

Migrate the active directory services from onpremise to EntraID (Azure),

Hello team

We want to migrate active directory services from onpremise to EntraID (Azure), how can we integrate the UserAgent in Palo Alto?

Greetings

Fuel Workshop on GlobalProtect Large Scale VPN (LSVPN)

Fuel Workshop on GlobalProtect Large Scale VPN (LSVPN)

Welcome to the next in our series of Fuel Workshops where will be covering the implementation of GlobalProtect for Large Scale VPN (LSVPN).  Our speaker, Siddhant Chawla, Senior Technical Sup