Export Management Permitted IP Access List

I have been looking through posts but cannot seem to find what I am looking for.

There are some Management Interface Permitted IPs on our Firewalls that do not match the Template that we have for them in Panorama. Is there a CLI command where I can

Meraki switches not getting DHCP IP

Meraki switch is connected to PAN firewall where we have created a pool in vlan 225. On firewall i can see that the DHCP IP has been leased for the switch in vlan 225 but switch is not getting a DHCP IP

any suggestion to replace current PA3020?

Hi.

we are planning to replace/upgrade current PA3020 to a newer PA model.

could you please suggest which model is the best suitable with my requirement below?

thank you.

Current PA3020 Setup Info

- using 5 virtual routers

- using aggregate interfa

Why Management interface do query instead of DNS-Proxy Interface

Hi Team,

I configured DNS proxy Interface e1/1 - 192.168.29.245 to clientless vpn.

DNS-Proxy resolves as,

1. General browsing resolves with DNS 8.8.8.8 and 1.1.1.1
2. Tutelartechlabs.com resolves with DNS 1.1.1.2 and 4.4.4.4
3. Amazon.forest.in (internal-appl

Policy Reporting

I was just hired by a company with many policies implemented. Is there any report that can tell me what policies are associated with a source IP or group? 

Clientless VPN - Application is not accessible

Hello All,

This is my topology I have configured Clientless VPN hosting two application as, paloaltonetworks.com (external-application) and amazon.forest.in (internal hosted application). But i am unable to access the application that hosted insid

MTU value

Hi All, 

If we set mtu value as 9192 in interface and 9072 as sub-interface, which one the sub interface choose.If it will choose 9072, would that mean 9072 size packet can be sent.

Similary,

Hi All, If we set mtu value as 9192 in interface and k

What problems or vulnerabilities does this present?

IMPORTANT NOTE: Never set both checkboxes "Forward Trust Certificate" and "Forward Untrust Certificate" in the same certificate, and do not have the "Forward Untrust Certificate" deployed under a trusted certificate chain. If you do this, it will cau

PA-3020 Suggested version

Please can you help me on this, I need an PA-3020 suggested version and latest version.

My current version is 9.1.11

Vulnerability Protection Profile action drop, but still forwards packets

Hello,

A customer has a Palo Alto perimeter firewall and a Fortigate DCFW which sits behind the PA in the line of traffic when incoming from the internet .

It has been observed that in a scenario when the Palo Alto firewall which has SSL Inbound

Adding an External Dynamic List Object and importing the Intermediate CA certificate from the external web server that the EDL is hosted on

I am trying to add an External Dynamic List to our PA-440. 

The External Dynamic List is hosted on an external web server by one of our security partners.  This web server is https enabled and authentication is via username/password.  This is the

Palo Alto PA-3400 Series degraded specs vs 3200 Seires

Dear Palo Alto Community

Is it just me, or did Palo Alto drop the ball on the new PA-3400 Series, while almost all specs gained an improvement over the old 3200 series. There is the value of Security-Zones that has me deeply confused/puzzled.

For the

Downgared or migration PA7000 series to PA5000 Series

Hi everyone, is there any document or guide for migrating from PA7080 to PA5000 series ? is there a downgrade/migration too?