Next-Generation Firewall Discussions

IPSec Tunnel goes Down After Few Minutes

hi All,

I am facing a strange issue with IPSec tunnels built on Palo Alto firewalls.

Scenario:

1. On both ends we have Palo Alto firewalls(various models PA-220, PA440, PA-3220, PA-VM(AWS))

2. Public IP addresses of both ends are always reachable

PAN-OS 11.0.1 Review Polices Link

Hi All

We are running pan-os 11 as a POC and have noticed that the "Review Policies" Link in applications and threats section does not appear to work, the review apps does and all new apps are correctly displayed but the Review Policies link from h

Multiple CDL instances in the same region

Hi Guys,

Can one CSP account have multiple CDL instances in the same region for Firewall Log Service. Use case is the user want to separate logs of different firewalls to different CDL instances. And eventually, also to have multiple AIOPS instance

PAN-OS HA Clustering and Integrated management and logging

Hi, I have questions about PAN-OS HA clustering and management

First, I read the document "HA Clustering Overview - PAN OS Admin Guide". and  I was able to confirm about HA Clustering.

However, there is a part in the HA Clustering part of the PAN

Where to download update for PA-2050 for learning purposes.

 this is EOL, so they don't show the images any more.  You can't download it via the website Where do I go find the latest supported image for PA-2050.

Any upcoming PCNSE Exam Vouchers?

SENSOR MEMORY: SLOT-0 MANAGEMENT MEMORY (SNMP MEMORY)

Hi 

In a recent few days we are seeing the below mentioned email alert coming to the customer mail box every day

SENSOR MEMORY: SLOT-0 MANAGEMENT MEMORY (SNMP MEMORY)

I am attaching the screenshot for reference.

Regards,

Satya Kalyan

content updates for paloalto from my internal server

Hello Team,

How to get content updates to my paloalto firewall instead of using updates.paloaltonetworks.com , I want to setup my private server and  download the all content updates in to server and i want to updates from private server to firewall,

How PaloAlto App ID detects application traffic in encrypted traffic apart from web browsing

Hello Team,

i want to understand How PaloAlto App ID detects application traffic in encrypted traffic apart from web browsing
i know its going take application information from SNI through TLS (this is for websites -having SSL) but i want to understan

Palo alto redundancy

Other that putting a palo alto in an HA pair are there any other ways to add redundancy?

FW Recommendation version

Kindly note that we found the below vulnerabilities in our boxes .

Model                                  PA-5020

Software Version            8.1.20

what is the recommended version and upgrade path .

EOL/Obsolete Operating System: Palo Alto Netw