Palo Alto Unable to Download Software Updates

Hi All,

Any advice on a possible solution or workaround? All traffic passes through the proxy server. We have already checked the KB below; however, we cannot change the DNS settings because the proxy server is being used as the DNS server.

https:/

AI for FW management

Hey Guys,

We are using PA firewalls in our DCs. A lot of focus in our organisation (like everywhere) is on use of AI.

So I was wondering how are you guys leveraging AI in Firewall Management? Are you using it for any policy cleanup, shadow rules iden

Exporting Dynamic address Group but not show list address

Hi Everyone

we tried to export pdf and CSV for dynamic address group from GUI, but when we check the PDF files and CSV files not showing the list addresses as shown in the screenshoot below. 

can everyone tell me how to export the dynamic address

ChatGPT User-ID, AD and IP mapping issue

There is an issue with Palo Alto firewall which has to do with user IP mapping and AD. User is grated access via policy in the format source-user = corp\employee. After that's done, the user works fine today accessing ChatGPT but then the user is not

Conditional Advertisement / BGP Failover with Dual ISP — How to Remove ISP1 Routes on Internet Loss?

Hi all,

I’m running a dual-ISP setup on a PA  with BGP to ISP1 and ISP2. My goal is:

1. Monitor ISP1 default route / Internet reachability.

2. If ISP1 becomes unusable, I want all traffic to fail over to ISP2.

3. I am advertising an IP pool to both ISP1 an

GUEST WIFI for new client

Hi All,

I just have a question. We have a new client on office and they will be using their own domain and laptop. They will connect to our GUEST internet and will use it to access their internal network.

The thing is client wants to have a ded

Pan-OS Dev Corner

Hi Everyone, 

I wanted to share my project that reduces MTTR for admins who actively use the CLI terminal. While studying Palo Alto Networks NGFWs at my college as a student, I noticed how much time I was spending manually running and parsing CLI comm

PA-440 won't talk via network

Good morning, all!

My lab PA-440 threw a weird on at me this week. When I tried to add it to a new SNMP server (Observium) the firewall stopped talking on the web interface and wouldn't respond to pings to the management IP.  After some rather involv

Max number of units (aeX.Y subinterfaces) supported under a single AE interface?

Hi Team,

I’m looking to confirm the maximum number of units (aeX.Y subinterfaces) that can be configured under a single Aggregate Ethernet (AE) interface on Palo Alto firewalls.

Specifically for models like PA-440,PA-450, PA-820, and PA-850, and acro

PA440でのDHCPv6-PDでのIP配布について

PA440でのIPv6環境でのシステム構築を実施予定です。

構成としてはWAN(2本) --- PA(HA) --- L3SW(stack) --- L2SW --- デバイスとなり、全て動的なIPv6での環境となります。

回線はフレッツ光クロスとStarlinkになり、各ISPからIPoE回線でのDHCPv6-PDでのIP配布となります。

上記の構成はPA440で実現可能でしょうか。

配下の機器にはPDでの委任もしくはRAでの配布を想定しております。

Activate ECMP without trafic disruption

Hello,

I wouldlike to enable ECMP on one HA pair. I read that the process will restart and can lead to trafic disuptions.

I was wondering if i could do the following in order to avoid disruptions : 

• Disable config sync.
• Doing the modification on my pa