PaloAlto 5420 Recommended 10.2. PanOS Version

What`s the PanOS Version recommended for PaloAlto 5420 Recommended in 10.2

Preparation for the new NGFW-Engineer certification due to the retirement of the PCSFE exam

I was preparing for the PCSFE exam, but will there be a significant difference in the questions compared to the NGFW-Engineer exam?

Ikev2 liveness check

Hello, I have a couple of questions regarding IKEv2 Liveness Check and DPD (Dead Peer Detection) on Palo Alto Networks firewalls. I’ve come across some conflicting information in various articles. Some mention that DPD is always active and cannot be disabled in IKEv2, while others suggest that the Liveness Check is the new version of DPD in IKEv...

eBGP to eBGP redistribution

Hello, In a NGFW how to redistribute a default route received via eBGP on one circuit to another circuit, also via eBGP. Basically performing an eBGP to eBGP redistribution. Thanks. Best regards

Do you know why you cannot check the Block IP list in other models except PA3200 , PA5200, PA5400 and PA7000 Series

Hi I should look at 'monitor > Block IP List' However, the tab could not be checked in the VM series and 3400 series. And after checking the document, I found that only the 3200, 5200, 5400, and PA7000 Series support H/W Block IP List. Are there any differences between the models mentioned above and the 3400? And is it correct that there ...

when I configure custom option 6 on DHCP, will it be over rides the primary and secondary DNS?

ADEM for on premises options?

Is this going live with ADEM for on premise firewalls? It seems the programming is already inside global protect, it's just a matter of turning on inside the firewalls.Does anyone have a timeline or some info regarding when this will come live for on premise firewalls?

Enabling CTD inspection

CVE-2020-2035 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions For this CVE, the solution was to enable CTD inspection May I know is there any impact to the system by enabling the CTD inspection?

Palo Alto unable to resolve its own static entries

Palo Alto unable to resolve its own static entriesWhen I try ping host abc.comit says ping : abc.com : System error How do I fix this?There is a static entry for abc.com on the palo alto

Using external zone in DNAT policy

Hi Team, We have 2 VSYS configured to communicate. VSYS 1 has 172.25.80.254 zone L3 : DC VSYS 2 has 172.25.70.254 zone L3 : DMZ I added two external zone (DC to DMZ) and (DMZ to DC) to allow communication between vsys and also the routing between VR of both Vsys. In DC , i have DNAT policy allowing a load balancing to 2 SRV located in zone L3...

Configure PAN OS locally when panorama is down

Hello team, I want to ask if when the panorama VM is down , and we need to configure firewalls locally, in this case , when we turn on the panorama , how would be the behaviour : 1- Panorama will detect that configuration is not sync and will inherit from FW? 2- or , the changes will not apear in panorama , and how to add these changes to pano...

PAN-OS 10.1.15

Hi Team, When is the expected release date for PAN-OS 10.1.15.