palo alto 850 firmware upgradation

Hi All,

Need to upgrade an palo alto 850 from 9.1.4 to 11.0. Basically i need a confirmation on below points.

1.Have only hardware support license, will it sufficient for firmware upgradation. PFA snapshot

2. As per below article i need to only d

Multiple Virtual Routers on SD-WAN Hub NGFW models supported

Hello!

Is the feature "Multiple Virtual Routers on SD-WAN Hub" supported for virtual software NGFW and PA-1410, 1420 hardware NGFW?

There are supported models started from PA-3400 only. 

https://docs.paloaltonetworks.com/sd-wan/3-2/sd-wan-admin/confi

IPsec Tunnel Down!

Hi Team,

CPU on 3250 series is between 50% and 60%

Hello,

We have a problem , where the DP CPU is between 50% and 60% .

We want to know the root cause . we investigated the resources consumption and everything is normal.

How can we investigate the if the problem is related to a specific traffic

Firewall Backup Script using powershell

Hi Team,

Does anyone having a working powershell script for to export the running config from firewall using API. 

stable version for pan 10.2 or 11

Hello Team,

Currently we have virtual firewall vm100 with version 10.1.5-h1, I want to update it to 11 version.

Could you please let us know the stable version for pan 10.2 or 11.

No policy recommendation for IoT

I have my firewall (PA-440) licensed with an IoT security license. The IoT security portal is working great and recognizing devices in my network. But I have a problem: I don't know why, when I go to the policy recommendation for IoT, the profiles fr

software update question

When updating Palo firewalls, why the need to update through each base version as well as a preferred maintenance version?

e.g. if going from version 8.1.x, to 10.1.x,  why 9.0 >  9.0.x > 9.1 > 9.1 > 10.0 etc.

IF each baseline version release e.g.

Decryption: Received fatal alert CertificateUnknown from client

Hi Folks, 

I'm seeing some instances of "Received fatal alert CertificateUnknown from client" errors in the decryption log when the root\issuer certs are clearly in the FW's cert store. Attached are screenshots of the error and the FW's cert store.