ikev2 site to site VPN between PA and ASA

Hi All,

I have a site to site VPN configured to client's ASA.

The VPN stays stable until the phase 2 lifetime expires and then never comes up until interesting traffic is generated from client(ASA) side.

On checking the PA logs, I see a couple of

is it possible to change raid configuration from raid-1 to 'raid-0 or raid-5' in Panorama M-700

Hi

We recently received a request from a customer who wanted to increase the panorama capacity of the M700 to 90TB or more.

The M700 Maximum disk size is known to be 48TB because the disk of '8TB x12' is configured as 'raid 1'.

Is it possible to in

Software status in GUI show blank, null and unknown on Passive panorama

HI ,

we just recently upgrade our panorama VM active and passive to 11.1.4-h1 version and upgrade successfully

However, we found it weird that on secondary panorama , software status showing blank, null and unknown on the installed version as sho

Panorama Certificate Import Api Does not work when targeting a Vsys

See attached document.  When using the API in Panorama and trying to target a vsys, it always imports to the shared location.  The documentation says it supports this.  Here:

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-panorama-api/pan-os-

Syslog Sending From panorama

HI

I have a question.
If panorama sends syslog to the syslog server, is it only the panorama syslog that is sent or all the logs of the local palo devices managed by panorama?

Thanks & Regards.

Panorama

New firewall refreshment to a new model and introduce to Panorama

We have Panorama which manage several firewalls. One of it is PA-3020 and we would like to do a refreshment with PA-440. 
In the current Panorama, there is already device group and template reference to the PA-3020. 
My question, what is the best way t

API/CLI - how to access subset of devices by tag assigned to them?

Hi there, 
I'm going to use device's tags to have another dimension beside of template/device groups. 
I've assigned a tag to subset of devices (using Panorama>Managed devices WebUI), but I'm really lost how I can get access/filter devices by this tag

Removal of Targets from Policy

I have a number of firewalls managed in Panorama that are to be decommissioned.

Some of these firewalls are in Device Groups with several thousand policy entries.  Annoyingly they have been assigned the firewalls in the target column.

Does anyone

Cloud NGFW I Cloud NGFW Integration with Panorama

We have deployed a cloud NGFW in azure using azure portal rule stack. The device is in production.

Now the requirement is to integrate this with panorama.

When we go to the device in Azure portal under security policy the options are greyed out. 

I

what is elastic+ management plane cpu process?

Can anyone explain why elastic+ is showing in show system resources command?

17162 elastic+  20   0 3923.0g  38.0g   3.3g S   5.9 15.1 168339:53 java

18242 elastic+  20   0 3921.6g  38.0g   3.3g S   5.9 15.1 163177:55 java

top - 19:19:39 up 104 d

URGENT VPN failover help needed

Hello Everyone,

We have an existing policy-based site-to-site VPN between our Palo Alto and client's Meraki.

The current VPN is to their Primary WAN IP address(Primary ISP). Now they have a secondary ISP. Both the primary and secondary ISPs are con

admin role panorama unable to push

Hi guys,

i need help for a stupid things but I cannot solve it.

My scenario: Panorama in 11.0.4-h1 with 40 firewall connected, one for every branch of my company.

What I want: the colleagues of the branch of Miami can made changes only template and d