2 PA-850s and 1 PA-440

Hi,

I received a quote from a supplier for 2 PA-850s with Wildfire , Partner enabled premium support and GlobalProtect subscription.
Then for the PA - 440 - Wildfire , GlobalProtect , advanced Url filtering , advanced threat protection and premium supp

User-ID with Azure AD

Hey all, I've set up User-ID with on-prem AD servers a few times - quite straightforward.

My question is, how do I set up User-ID when my customer uses Azure AD (with no on-prem servers)? I need to someone get the user-to-IP mappings on the firewal

Palo Alto New User ID Agent Adding to Firewall

Hi All,

We want to add new User ID Agent to our Palo Alto Firewalls and remove the existing user ID Agent from Firewalls.

The reason is the current User-ID Agent is hosted on Window 2012 and we are going to decom that Window server.

We will install n

Palo Alto Site to Site IPsec VPN went down

Hi ,

We've setup Site to Site IPsec VPN between Palo Alto Firewalls. The tunnel was up and working but it went down after some time.

Look like the tunnel went down because there is no traffic passing through the tunnel. Everytime we need to trigger

VPN internet access

I have set my VPN access with no split tunnel so the users gets their internet access through the access through the VPN. Even though I cloned the security rule to the internet from the one used when you are onsite, it does not give the same access t

TCP-RST-from-CLIENT

Hi Friends,

We have a requirement we have cloud server Oracle cloud

When ever user from LAN tries to access the resources over the cloud user is able to login but unable to access any resources.

While checking in logs it is showing tcp-rst-from-cli

HSCI port - 5410

Hello All, 

I'm trying to spec the SFP's for PA-5410's & per the below documentation.

https://docs.paloaltonetworks.com/hardware/pa-5400-hardware-reference/pa-5400-series-firewall-overvi...

The HSCI port is a 40G port & Palo Alto Networks recom

snmp configuration question

as we all know , snmp can be configure at Setup -> Operiations ->SNMP Setup

the snmp community string default is "public" 

I would like to ask

1. this is the read-only string or the read-write string ?

2. do we set the read-only string for the device

Multiple vsys share one pair of WAN circuits?

I have 4 vsys that are currently using individual ports to connect to the WAN circuits. I need to free up ports for additional vsys, and would like a shared circuit port for the multiple vsys to use. I've tried a layer 3 interface with sub interfaces

IPSec VPN Negotiation Issues

Dear Members,

Greeting to All!

Curranty, I'm using site to site multiple VPN configuration with Palo alto Firewall to different vendor site. All of the tunnel is working fine VPN ok.

My main problem is inside of my firewall public internet down the

Url access error

Hello Team, I am getting this error in the EDL, also confirm URL and certificate are correct.
Gone thorough this kb : https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-release-information/known-issues/known-issues-related-t

Query: SAML Integration Failed

Is there have a way or integration to use a thrid party MFA solution to login to the palo alto firewall as administrator?

Do SAML profile can be added to authentication sequence?

Furthermore, if the saml profile cannot be added to the authenticat