Global protect Two Factor Authentication with FortiAuthenticator

Hello Gents , 

we managed to enable the Two Factor authentication for Global protect with fortiAuthenticator Raduis server .

whats your recommendations to implement this 

PA-5220 TEMPLATE CACTI FOR MONITORING INTERFACE

Hi All,

Anyone can have experience to integrate with cacti and monitoring all the ports used?

Anyone have an xml format? for PAN OS 10.1.4

If anyone have can help? well appreciated

Many Thanks

Jeremy.P

User-ID with Azure AD

Hello,

We have PC's that are only registered inside Azure AAD and managed via Intune they have no connection to the on-prem AD and are connecting via a Wifi zone behind PA to the internet.  How can i determine the USER id, without user interaction.

Or

Integrate with Saasyan Assure

We have implemented Saasyan Assure to provide pastoral care controls and reports for our Palo firewall. Since upgrading to 10.1.5 (and h1 and h2) we're getting the below (or similar) message when we're trying to create a new security rule via API.

{"s

User ID Redistribution Design

hey,

i am going over the following article

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/user-id/deploy-user-id-in-a-large-scale-network/redistribute-user-mappings-and-authentication-timestamps/firewall-deployment-for-user-id-redistributio

PA Link Aggregation with a Meraki switch

Hi,

I am just checking to see whether anyone has successfully integrated a PA-5220 wit a Meraki switch? Is there anything I need to look out for? 

What needs to match on either end of the link:

Bandwidth?

Duplex?

Interface type (e.g. Layer 3 on both ends

Global Protect yubikey config

I need to integrate my yubikey into the global protect client, i will at some point really soon have many users that will have a yubikey and will want to use them.

Extreme Networks User-ID to PanOS 10.x?

We moved to a setup with Extreme Networks and Palo Alto a few months back.

On the wireless side, our users connect using Extreme's (originally Aerohive's) PPSK, which has user-ID info. We'd like that user-id to show up in PanOS.

I was sent this docum

Service Principal issues on Panorama Plugin for Azure

While setting up the Service Principal on Panorama Plugin for Azure, even though the IAM role of reader seems to be properly defined in Azure we get this error message during the validation phase:

ERROR: Validation of #######-####-####-############ fa

User-ID displayed computer name after upgrade panorama to 10.1.2

Hi Guys,

User-ID displayed computer name after upgrade panorama to 10.1.2. 

Our firewall is still on version 9.1.3-h1 but after upgrade the panorama to 10.1.2, the user-id is showing computer name.

Apparently it happen only when the data source is from

PA as web proxy

Hi,

I want to use PA as web proxy, just like other firewalls by configuring ip address (of PA) and port number in client browser to get the internet access.

Note: I am not looking for caching. 

Thanks.

PA-3220 - Device Registration and Technical Support

Hi Support team,

We have purchased PA-3220 device for our project but unable to register online after entering serial no#, customer no# or customer PO number.

For your information, while registering account "it is showing that "unable to create user

PA-3220 - Device Registration and Technical Support

Hi Support team,

We have purchased PA-3220 device for our project but unable to register online after entering serial no#, customer no# or customer PO number.

For your information, while registering account "it is showing that "unable to create user

sshpass not working while passing command

Dear Team,

I am doing an automation script in which I need to get the command output through sshpass

sshpass -p device_password ssh -q -oStrictHostKeyChecking=no -oConnectTimeout=20 device_username@Palto_alto_IP show system info

This one is not wor

LACP and Virtual-Wire

Hi All, 

I'm planning to configure the PAN 850 with LACP aggregation to Cisco NEXUS 9K with a transparent mode between the NEXUS 

switch and router.

Is it possible to configure the LACP group interface with the interface towards router as one virtual-