Custom Admin Template Examples for GP Admin and Network Engineer?

So recently we (as in voluntold lol) decided to get rid of our dedicated Cisco L3 devices and move the L1 (VMWire) only FW's into L3 as a "cost saving measure".  Won't get into how much I hate this but the decision has been made. Also this entire thi

Cant push config due to error

Getting error when trying to push configs from Pan - checked policy and it looks fine was not a problem previously?

Details:
. Validation Error:
. rulebase -> security -> rules -> Deny_Inbound_Internet_Bad_IPsBOTNET -> source-hip unexpected here
. rul

Panorama slowness when monitoring traffic

Hi support,

Panorama is facing slowness when monitoring traffic. What can be checked from the TSF file? There is no changes on the panorama itself. 

After changing exiting object name at panorama, got commit failed message

• • . Validation Error:
• . rulebase -> security -> rules -> <our rule name A>-> source ‘<want to amend object name> is not an allowed keyword
• . rulebase -> security -> rules -> <our rule name A>-> source ‘<want to amend object name> is an invalid ipv4/v6

Multiple Virtual Routers in a single system - Issues with Failover in an Active/Standby setup

Hello,

We have a pair of PA5050 appliances that operate dual virtual-routers in order to provide dual ISP connectivity using eBGP between them.  We also have some site to site and AWS VPNs terminating on VR1 and GlobalProtect VPNS terminating in VR

Panorama messages.

hi.

 Any idea why panorama suddenly started sending this messages a lot 

opaque: gRPC connection to iot.services-edge.paloaltonetworks.com:443 is broken, error: fail to parseTlsCert, err fail to load client cert[/root/client.pem], err open /root/clien

Configuring shared interfaces, VLAN interface and virtual switch On Vsys

I am looking for information on following configuration. Reference document, link or video will be a great help.

- How to set up a shared interface for multiple V-sys?

- How to set up VLAN interface (L2/L3) on specific V-sys?

- Do we have a virtual

Panarama migration M-100 to M-200

So I have been running my Panorama on an M-100 since I inherited it, now the M-100s are end of life and it is time to move on.  So I bought an M-200, seemed reasonable at the time.  Now trying to migrate, after working with TAC for a couple of weeks,

Logging service license not assigned from Panorama to FW

There's deployment with Panorama and currently one HA PA pair managed by it. Panorama sitting at 9.1.5, firewalls at 9.1.4.

Cortex Data Lake license is assigned to Panorama and seen in the Panorama -> Licenses section. In order for the firewalls to se

changing a gateway's management IP?

If i have a gateway managed via Panorama, what would be the steps needed if that gateway's management IP needs to change?

The actual change of IP is straight forward. But then what about the changes needed between Panorama and that gateway?