Next-Generation Firewall Discussions

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

PA 440 just stopped working

I have a 2 PA 440 os 10.2.7 at two completely different locations and suddenly stopped working. I don't see any advisories out, anyone else seeing this recently

Monitor SDWAN Links with SNMP

Hello everyone. Do you know if it is possible to monitor with SNMP all the links of each branch connected to sdwan? With the PANOS 10.1 or 10.2 version. Regards,

Resolved! Share the upgrade path from 9.1.13-h1 to latest

Share the upgrade path from 9.1.13-h1 to latest

Resolved! Bandwidth

Hello team, This is my first time here. I have two palo alto to replace and i need to find out the current bandwidth get used on the site, Is there a specific command on the cli or GUI i can find out what bandwidth get used on the site please?

M365 slowness via Prisma

Hi Team, We are facing issues with the M365 via prisma. If we bypass prisma it feels better to access. If it is via Prisma it is pretty slow. Any suggestions on how to troubleshoot this issue. Regards, Sanjay S

Newly-Registered-Domains

Hi Everyone We recently implemented Advanced URL filtering at our University, one of the categories we have blocked is Newly-Registered-Domains, we created a custom URL group and implemented dynamic lists for the infosec team to add exceptions and put a good process in place. The issue we seem to have is that we now face a challenge with our...

Palo Alto HA firewalls like for like replace

Hello Guys, I have a project to replace palo alto with another two palos they are configured as HA and i want to get all the cli commands in one go and past it into the new firewalls ? will that work? who knows what is the command that we could do that please?

Action is Reset Both in traffic monitoring

The user was trying to access the Proofpoint links it is not accessible in the firewall. We could see the action is reset both in monitoring and a session end reason is policy-deny and checked the threat logs but we couldn't see any logs in the threat. could someone please help me to understand the issue

The panorama encountered a commit failure: "failed to create sdwan cluster meta file: object of type 'NoneType' has no len()"

Hi team, While configuring PanOS SD-WAN, I successfully added the firewalls as managed devices to Panorama and installed the SD-WAN plugin version 3.1.2. Subsequently, I included the devices in the SD-WAN configuration, activated BGP policy for automatic creation. However, an error has surfaced in the process. ---------failed to create sdwan clu...

How to check if a specific port/servic is getting passed throgh the firewall to a specific Public IP address

An IT Auditor stated that SNMP is listening through the firewall for a specific Public IP Address. I have been filtering the network traffic on the PaloAlto 3020 for that specific IP address and also filtering with port 161. BUt Id not see any results except that the 'Deny-Deny' catch all group was being used. That is suggesting to me that t...

My PA-450 is not showing Network activity in the ACC tab

Good Morning! I am not seeing any network activity in the ACC tab for my 450. I've cleared all filters just in case, restarted the management plane, I even failed over to see if it was isolated to the one unit. Both are showing this. When I set the date spans, I see that the 9th is the last time datapoints were added to the display. The ONLY c...

Resolved! UserID domain name wrong

Hey everyone! So, we've recently made the switch from Checkpoint firewalls to Palo Alto ones, and we're still ironing out some kinks in the setup. Right now, we're focusing on setting up app control rules and such. But here's the thing: we've hit a snag with UserID mapping. We're hooked up to our Microsoft Active Directory on-prem, and everyth...

Resolved! Upgrading PAN-OS

Hi all, I will upgrade the PA-3200 from pan OS 10.1.9 to 10.2.7-h3, do I need a base image of 10.2.0 for the upgrade process? because i don't see documentation for the upgrading to 10.2.0 Thanks

Custom EDL List not getting Populated

Hi Community, Have configured EDL IP & Domain's list. Test source URL is accessible but its not showing any entries in the list. In IP list it showing only 0.0.0.0/32 but actual list is not showing. Please advise. Pan OS version: 10.2.7

Resolved! Should I upgrade PanOS to 11.1

Forgive my lack of knowledge but we have a PA-5410 running 10.2.4-h4. I was curious with 11.1 being out know if I should upgrade or stay on 10.2?

Discussions

Welcome to the Next-Generation Firewall Discussions!

PA 440 just stopped working

Monitor SDWAN Links with SNMP