This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

HA1 question

Hi, I have HA1 link traversing 2 upstream routers - if one of the routers goes down, both FW lose HA1 and thus; both become Active. Is it possible to configure HA1 backup over an existing LAN side link? i.e. not using a dedicated port for this but using a sub-interface / existing L3 interface etc? thanks.

No proposal chosen ikev1

After upgrading to panos preffered version 12.1.7-h3 my ikev1 ipsec tunnel with ipsec crypto md5,3des,nopfs is not coming up , knowing that ike phase 1 is successful but ike phase 2 is giving no proposal chosen error , the algorithms matches the other peer and i tried downgrading the tunnel came up, i would appreciate any help

Move my Panorama vm from VSphere to Hyper-V

We are changing our hypervisor platform from VMware to Hyper-V. Our normal migrate process (Shutdown, Backup with Veeam, Live Migrate to Hyper-V) failed with #Panorama, perhaps not unexpectedly How can I migrate my current setup?

J.Dore by • L0 Member
  • 104 Views
  • 1 replies
  • 0 Likes

Starlink DHCP Route Injection dropping if DHCP expires briefly

This is a remote location with a Starlink connected directly into a Palo Alto 510. We have another backup satellite connection provider which should be used for emergency / comms only when Starlink goes offline. Starlink renews its DHCP lease every 5 minutes. Normally, this works fine, and gets renewed successfully without interruption. Once...

Resolved! PAN-OS 12.1.X Firewalls & Panorama Managed

Just a heads up to the community apparently there's an issue with firewalls that are 12.1.X that are configured to be managed from Panorama. Apparently PAN-322826 exists where any hardware that's Panorama managed can spontaneously suffer a hardware reload due to a "configd" memory leak. (A 4 months long case finally got us this info.) To my k...

DNS Proxy stops responding to requests

Has anyone else recently experienced problems with DNS Proxy stopping responding to client DNS requests? I run DNS Proxy on multiple sub-networks, such as our public Wifi zone, along with spyware/URL filtering for preventing access to malware/prohibited/etc. domains. The Security Policies prevent access to proxy avoidance and encrypted DNS. Fo...

Failure to uninstall GlobalProtect 6.3.3 Windows 11

I am having a hard time uninstall GlobalProtect version 6.3.3 The error message is saying The installer has encountered an unexpected error installing this package. This may indicated a problem with this package. The error code is 2503. I am trying to uninstall the package via Control Panel and it is giving me this error. I deleted all of the ...

josephl_0-1786973630839.png
josephl by • L0 Member
  • 114 Views
  • 1 replies
  • 0 Likes

Palo Alto Networks NGFW Best Practice Assessment (BPA) via the Posture API

Palo Alto Networks NGFW Best Practice Assessment (BPA) via the Posture API Client & Partner Implementation Guide — Windows PowerShell Workflow Purpose This guide provides a practical end-to-end procedure for generating an on-demand Best Practice Assessment (BPA) from a Palo Alto Networks firewall configuration using the Strata Cloud Manager ...

JeanPaul222_1-1786098312985.png
JeanPaul222_2-1786098327651.png
JeanPaul222_3-1786098347950.png
JeanPaul222_5-1786098493750.png

Resolved! Step to change standalone for both device

Hi All, All our PA is managed by Panorama and there are a couple of HA pairs in our environment. we just want to change one of the HA pair to standalone. Currently our set up is active passive. We would like change to standalone on both device. Is there any steps to make this happen? Thanks !!

Portal Sync Issue - Credit Pool Expired status for Active Eval E609278

Hello Support Team, My Eval Request E609278 was confirmed active until 09/10/2026 by the NextWave team. However, on my CSP portal (Account ID: 64687609), my Credit Pool ID 1279246520 is still showing as expired (07-10-2026) and the button "Create Deployment Profile" remains greyed out / disabled. Could you please refresh/sync my CSP account lice...

What OS version is recommended for a Palo Alto 3410

Hello team, What OS version is recommended for a Palo Alto 3410, does not have a licence yet.Firewall is only doing basic security rules (no user-id / app id / security profiles) and basic routing.Currently it is on 11.1.4-h7.Could you please suggest if this OS is ok or need to upgrade to which version and reason for choosing that version please...

User-id mapping domain name issue

Hi everyone, I recently set up GP user-id mapping in our network. It's showing domain.local\username in the logs. I was also told to set up User-ID mapping using the windows agent as well since our users would need to disconnect from GP occasionally. The logs that we get from the windows agent is domain\username. Issue now is that when we se...

GlobalProtect Silent Install

We are currently in the stages of switching over our equipment to palo alto. In preparation, we are installing the global protect app on all machines ahead of the migration. I've got a silent install setup, but once it completes, I get a connection failed message. I'm wondering if there's any way to suppress this message since it will fail until...

  • 24434 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks