Multiple Virtual Routers on SD-WAN Hub NGFW models supported

Hello!

Is the feature "Multiple Virtual Routers on SD-WAN Hub" supported for virtual software NGFW and PA-1410, 1420 hardware NGFW?

There are supported models started from PA-3400 only. 

https://docs.paloaltonetworks.com/sd-wan/3-2/sd-wan-admin/confi

IPsec Tunnel Down!

Hi Team,

CPU on 3250 series is between 50% and 60%

Hello,

We have a problem , where the DP CPU is between 50% and 60% .

We want to know the root cause . we investigated the resources consumption and everything is normal.

How can we investigate the if the problem is related to a specific traffic

Firewall Backup Script using powershell

Hi Team,

Does anyone having a working powershell script for to export the running config from firewall using API. 

stable version for pan 10.2 or 11

Hello Team,

Currently we have virtual firewall vm100 with version 10.1.5-h1, I want to update it to 11 version.

Could you please let us know the stable version for pan 10.2 or 11.

software update question

When updating Palo firewalls, why the need to update through each base version as well as a preferred maintenance version?

e.g. if going from version 8.1.x, to 10.1.x,  why 9.0 >  9.0.x > 9.1 > 9.1 > 10.0 etc.

IF each baseline version release e.g.

Decryption: Received fatal alert CertificateUnknown from client

Hi Folks, 

I'm seeing some instances of "Received fatal alert CertificateUnknown from client" errors in the decryption log when the root\issuer certs are clearly in the FW's cert store. Attached are screenshots of the error and the FW's cert store.

Firewallcrash because of Application cloud Engine (ACE)

Hi community

Since about 2 weeks a vm firewall started getting problems with random crashes. Our setup is a firewallcluster but so far the active firewall crashes almost completely silent. At least the firewall does not initiate a failover to the p

About certificate

Migrating configuration from the firewall running PAN-OS 9.1 to new firewall running PAN-OS 11.1 directly

Hi LIVEcommunity

I plan to migrate the configuration from a PA-3020 firewall currently running PAN-OS 9.1 to a new PA-1410 firewall running PAN-OS 11.1.

I'd like to know if it's possible to directly import the configuration from the older firewal

Zscaler Traffic Pattern

My company users are using ZCC on their laptops. Recently, there has been an issue where Zscaler traffic is being denied by the Palo Alto Firewall.

Upon checking the logs, it appears that the ZCC traffic pattern changed into web browsing and HTTP Prox

Unable to Block Personal Gmail on Ubuntu Machines.

Hi Friends,

We have a customer who is facing issues in blocking Personal Gmail on Ubuntu Machines.

I have followed the below mentioned discussion and created the URL filtering and Policies.

https://live.paloaltonetworks.com/t5/general-topics/block-