General Topics

IPSec intermittent disconnection issue

Hi,

Is there a command to check if a tunnel went down on a specific time and why it happened.

I have a tunnel set-up to a 3rd party where they keep monitoring some of their servers. They inform me that they receive alarms every hour that the endpoi

Qs about bidirectional NAT offerings

I am looking for a router/firewall with the following specs:

• at least 10 1Gb ports
• supporting bidirectional NAT
• compact

Can someone point me to PA products which would meet these very loose specs?  Not sure if every PA device supports it.

Management and Dataplane on Vsys

Hello Everyone, I have a question.

When using virtual systems, how are the management and dataplanes split?

Is the management plane shared between VSYS and Dataplane separated? Or are both the same for all VSYSs?

Palo Alto 5280 Firewall

Hello everyone. I'm new to the Palo Alto community. However, I have a question. Does anyone have any documentation on configuring BGP routing on a Palo Alto 5280 firewall?

Upgrade DCs to W2019 stop working Palo Alto agentless

Hi,

We upgraded all ours DCs to W2019server and now the Palo Alto can not monitor the users. We use Agentless UserID.

So how can we fix it? 

NEW CVE causes new hotfix, can the hotfix be considered stable?

Previously it was mentioned that 10.2.12-h6 was the latest stable version. In light of the new CVEs and the recommendations that come with it, can I verify that 10.2.13-h5 is the new stable version?

Engagement Points Guide

Hi, please can you help me find the Palo Alto Engagement Points Guide - for partners.

Assistance with 100Gb load testing on a PA-5450

We have a spirent connected directly to a PA-5450 to do load testing on the 100Gb ports.  The PA5400 has two NC cards (Slot 1 & 2) and then 4 DPC cards (slot 3-6).  The docs show that NC1 is logically mapped to DPC3, and NC2 is mapped to DPC4.  But t

When should I use "enforce symmetric return" in the PBF rules?

What is the purpose of this setting? Doesn't all traffic go out the same route as it came in, anyway?

Releases guidance

Hello, why I lost access to software releases guidance page? I receive a access denied error

What Cisco SFPs are compatible with PA QSFP28-CWDM4 100Gb SFPs?

Client is testing 100Gb throughputs on a pair of PA-5450s.  We added the PA supplied QSFP28-CWDM4 (Finisar) transceiver into the Cisco switch and the Cisco logs revealed the transceiver is incompatible.  But, in order to do 100Gb on the PA it is requ

AI ​​Access feature 11.2.2-h1

PA-5450

I need to enable the AI ​​Access feature, then the PAN OS requirement must be PANOS version 11.2.2-h1. Currently PAN OS uses 10.2.9-h1, then I checked in portal Preferred it is still 11.1.6-h3. Please confirm to Palo Alto best practice, whi