Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4510 Views
  • 0 replies
  • 1 Likes

Resolved! HA-Pair losing management capability after upgrading to 11.1.5.

For whatever reason, every time we attempt to upgrade to 11.1.5 to one of our HA-pairs, we are unable to putty in, ping, or anything. BUT upgrading a single firewall has no issues when upgrading. After downgrading back to 11.1.4, we are not having this issue anymore. We attempted to upgrade to 11.1.5-h1, but are still having this issue. Is anyon...

PAN OS 8.1.25-h3 for PA-850

Hello Everyone, In one of the branch, we are having PA-850 firewall with firmware 8.1.13 version running on it. Because of the organization limitation, there is no internet on the firewall so we couldn't actively upgarde the firmware version. Now we are planned to upgrade the firmware version to 8.1.25-h3 by downloading it from support portal...

PA-850 Software upgrade path

Hi all, A bit confused on upgrading path for PA-OS. We are on Software Version 9.1.9 and are planning on upgrade to 10.0.11-h1. I was under the impression that you would want to download and install 10.0.0.0 first but mix input from other sources. The current method that was explained is to Download 10.0.0 and 10.0.11-h1 and 10.1.0 and 10.1.6...

PA-820 after factory reset | by default User/Pass not working....

PA-820 experiencing an issue by default User/Pass not working (admin/admin) here is the logs listed below Welcome to the PanOS Bootloader. U-Boot 8.1.1.0-31 (Build time: Apr 23 2018 - 15:16:48) Octeon unique ID: 03c00051821df31e00c6N0.LMC0 Configuration Completed: 16384 MBQLM 2: SGMIIQLM 3: SGMIIQLM 4: SATADLM 5: SGMIISATA0: availableSATA1...

m_sufian by L1 Bithead
  • 5717 Views
  • 3 replies
  • 0 Likes

Monitoring SD-WAN Tunnel-IF via ping

Hi Guys, We're looking to connect multiple Palo Alto devices to our core Palo Alto via SD-WAN. In some cases, we have three internet connections at the customer site, each connected through a different ISP. Our goal is to monitor each tunnel by pinging the destination tunnel interface IP address from our Monitoring Tool throught our Core Palo Al...

DHenze_0-1731336658860.png
D.Henze by L1 Bithead
  • 2168 Views
  • 4 replies
  • 1 Likes

Clientless VPN - Application is not accessible

Hello All, This is my topology I have configured Clientless VPN hosting two application as, paloaltonetworks.com (external-application) and amazon.forest.in (internal hosted application). But i am unable to access the application that hosted inside. In this question have attached my configuration also. other than that there is no sent byte f...

qst.jpg
q1.jpg
q2.jpg
Q3.jpg

10.2.10-h9 Log Display Bug?

In the release announcements at Support PAN-OS Software Release Guidance it says that 10.2.10-h9 is the preferred release but on this page it also says that displaying filtered logs doesn't work properly and points you to a fix in 11.1.5 However this problem with log display is not listed in the known issues for 10.2.10 and I can't find a desc...

djr by L4 Transporter
  • 1434 Views
  • 2 replies
  • 0 Likes

Resolved! How download a base image for Pan-OS 820

Hello. Good morning. I am trying to update my tall stick to version 10.1.12. However, when loading this update the system tells me that I need to load the base image 10.1.0. I have tried to find the base image on the support portal but have been unable to download it. Does anyone know where I can get it? The computer I am upgrading is a PaloAlto...

Resolved! CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

Hello!I just received and was reading this email CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface and if I'm reading it right, the guidance is to upgrade to 10.2.12-h2 or greater (I'm on a PA-220, 11 is not supported). I've been trying to stick with the Preferred versions here Support PAN-OS Software ...

VBenfanti_0-1731943900461.png

Adhering to OpenSSL Security Level 2 Post-Uprade to PAN-OS 11.1 & LAter

Hello, In the PAN-OS upgrade guide there is a new step (step 7) when upgrading to PAN-OS 11.1 & later which refers to regenerating or re-importing all certificates to adhere to OpenSSL Security Level 2 requirements. Is there any easy way to check the status of existing certificates to ensure they meet this standard? Will any referenc...

  • 1794 Posts
  • 60 Subscriptions