Software updates PA-3220

Good day,

I was ask to revert to a previous version of software for one of our FW, to do so I had to force a factory reset to the desired version. Which went well, but now either the software or the dynamic tabs are blank. Is there a way to repopulat

Forwarding system logs to log collector

Hello,

Currently we have firewall sending Threat and TRAFFIC log types with CEF format to Sentinel workspace through Linux log collector with omsagent.

We need to send the System log types as well from the firewall to the log collector and then in

Commit History Check on Panorama

How can I review the committed history beyond the specified date (2024/04/25) in the Panorama Config Audit?

Backups and configurations locally

Best regard

Equipment

I have 2 specific doubts that I would like the community to clarify for me.

1. I have a device managed by Panorama, due to an incident that occurred, local configurations were made on the device, and several interfaces and polic

SAML for external admin, local admin for internal admin

Hi, been racking my brain trying to figure this one out.

Essentially, to comply with regional guidelines for our client, we are enforcing MFA for all administrative accounts on the Palo Altos, which are internet facing. 

I have implemented SAML authe

policy based Ikev2 site to site VPN between Cisco router and Palo Alto

we have a policy-based site-to-site VPN between cisco router and palo alto. But the tunnel goes down and doesn't come up after the IPsec lifetime is expired. And tunnel only comes up after sending traffic from cisco to palo alto and not the other way

VMware ESXi Panorama ha1 down

Hello -

I have a VMware ESXi Panorama (10.1.10-h1) active/passive pair and the ha1 port goes down several times a day every day.  This produces the following in system logs "Staying in Active state after split-brain recovery (split-brain duration: xx

Paloalto TLS/SSL error while forwarding logs over TLS Syslog

PKCS12 Certificate  and Password generated from Paloalto is used at syslog server to establish connection between both system and used to decrypt the logs. However after establishing the connection the ssl handshake is broken and we see below error.

Built-in External Dynamic Lists - Not showing so they can be added to shared Policy

I am currently attempting to make all of my firewals look the same from a policy perspective as possible and I would like to know if there is a way to add the

Built-in External Dynamic Lists

To the shared policy.  I understand that each firewall is u

Panorama Object in Firewall Vsys

Hi all,

We have a firewall with 3 vsys and object in shared. the object for address is around 25.000.

we was integrate the firewall into the panorama, and the object was imported to each vsys.

i found that after the import each vsys have 25.000 add

Panorama

Hello I was looking for the REST API's for EDL in panorama, I could only able to find for the create EDL that too for IP only (https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-panorama-api/pan-os-xml-api-use-cases/enforce-policy-using-external-dyn