Palo Alto HA firewalls like for like replace

Hello Guys,

I have a project to replace palo alto with another two palos they are configured as HA and i want to get all the cli commands in one go and past it into the new firewalls ? will that work? 

who knows what is the command that we could do

Action is Reset Both in traffic monitoring

The user was trying to access the Proofpoint links it is not accessible in the firewall. We could see the action is reset both in monitoring and a session end reason is policy-deny and checked the threat logs but we couldn't see any logs in the threa

The panorama encountered a commit failure: "failed to create sdwan cluster meta file: object of type 'NoneType' has no len()"

Hi team,

While configuring PanOS SD-WAN, I successfully added the firewalls as managed devices to Panorama and installed the SD-WAN plugin version 3.1.2. Subsequently, I included the devices in the SD-WAN configuration, activated BGP policy for autom

How to check if a specific port/servic is getting passed throgh the firewall to a specific Public IP address

An IT Auditor stated that SNMP is listening through the firewall for a specific Public IP Address.

I have been filtering the network traffic on the PaloAlto 3020 for that specific IP address and also filtering with port 161.  BUt Id not see any res

My PA-450 is not showing Network activity in the ACC tab

Good Morning!

I am not seeing any network activity in the ACC tab for my 450. I've cleared all filters just in case, restarted the management plane, I even failed over to see if it was isolated to the one unit. Both are showing this. When I set the

Custom EDL List not getting Populated

Hi Community,

   Have configured EDL IP & Domain's list. Test source URL is accessible but its not showing any entries in the list.
   In IP list it showing only 0.0.0.0/32 but actual list is not showing.

   Please advise.

Pan OS version: 10.2.7

Study Guide PCNSE in contradiction with the Technical doc.

Hi !,

Just want to be sure please, The study guide page 181 mention that to use data port for HA1 link and management port as HA1 backup but it's not what is written in the technical doc... HA1 on Mgt port for PA without dedicated port and a data por

Certificate to secure 100 plus SD WAN PANFW management interface for webui

All

I plan to secure web interface for management of PANFW. we use data plane IP to manage all FWs.  Is there way to deploy certs to each PAN via Panorama or it has to be done one by one. If any one did this before Please help and share

Thank you

Dynamic User Group Auto Remediation configuration

Zero Trust architecture is the new trend of Security Philosophy based on the principe, never trust and continuously verify trust, which means even if the user is authenticated and permitted to access corporate resources with least privileges usi

Agcinvokerutility.exe - Adobe Utility

Hi All,

Recently our Palo Alto flagged Agcinvokerutility.exe (Virus/Win32.Wgeneric.Eedlvy(624280308)) as malicious. A quick search on the virus signature on Virus total confirmed it to be highly malicious.

However, Agcinvokerutility.exe is also a

PA-410 GUI is very slow over IPsec vpn

We are deploying new PA-410,450,440 in remote location. From Head office firewall to Remote location there is an IPsec vpn.

When users from HO try to access PA-410 firewall over GUI it took 10 - 15 minutes to load. During this GUI loading data plan