polycom会议电话流量经过palo alto防火墙，发现会议到达16分钟左右会断开连接

如上面所说，当流量跳过防火墙是连接同一台交换机，状态正常，专线网络，没有做nat，会话保持时间也是默认的3600，尝试过override 策略，流量也匹配正常，但是情况还在，抓包分析，流量建立了三次握手以后，后续会出现超时的流量，网络层是正常的，不明白会有超时的数据，有人碰到过吗，有什么解决建议。

Migrationg from Cisco Meraki MX 67 to PA 850

We are facing issues with migration  from Cisco Meraki MX 67 to PA 850

Multiple remote site firewall commit errors/failures after Panorama 10.2 upgrade

Hey all,
Recently step-upgraded Panorama from 9.1.14-h4 to 10.2.4-h4. No issues upgrading Panorama. This panorama manages 180+ remote site firewalls. Ever since the upgrade we have *a few* remote site firewalls that are failing to commit properly in 2

Customer Firewall Transfer

Hello Guys,

I am new on the Palo Alto Environment, i work a lot with Fortinet.

So in the Fortinet "world" i can register an account like a customer and require for try some of their products, like FortiEMS, FortiOS VM, FortiAnalyzer Etc, all of this

Unable to commit after upgrade from 9.x.x to 11.x.x

Unable to commit after upgrade from 9.x.x to 11.x.x 

while commit the error message is below 

• user-id-agent unexpected here
• vsys is invalid

Import Backup

Hi All,

Can we import backup from PA-220 to PA-445??

How to limit youtube with QoS max bandwidth?

Hi experts, 

Palo alto qos is my first time.

So i have a task to limit maximum bw for youtube in my company is just 10 MB.

Can i assume to config : 

guarantee bw : 0

max bw : 10 

I assume with that config, i didn't reserved any bw for youtube but

Source and Destination NAT for Site to site VPN

Hello,

I'm trying to configure a site-to-site vpn with between two organizations.

Our internal IP range is conflicting with the other organization network, so we are trying implement Source and Destination NAT 

The VPN tunnel is up, but I'm str

DNS routing issue - OpenVPN inside GlobalProtect VPN

Hi,

We are running on a setup today where the client connects through L2TP to a Mikrotik-router and then connects with OpenVPN to the next environment.

Just now we are switchning to PA440 and GlobalProtect VPN IPSec instead of L2TP, and we have a

Vsys and tagging automation

Hello, we have a service that runs when we build servers that will tag the servers being created with its tag and ip information via the rest api. We're trying to migrate to a new vsys, from L2 to a L3 vsys and when we added the new vsys to panorama

Migration assistance PA-5050 to PA-3420

Hi,

I need assistance replacing a firewall cluster PA-5050 and standalone panorama by a firewall cluster PA-3420 and a cluster panorama.

Actually the firewall cluster PA-5050 and standalone panorama are in production. The templates network is manag