Showing results for 
Search instead for 
Did you mean: 

Browse the Community

Cloud Integration

The scripts, templates and resources on this page are contributions from Palo Alto Networks and from...

3 Posts


Expedition is the fourth evolution of the Palo Alto Networks Migration Tool. The purpose of this too...

895 Posts


Palo Alto Networks Telemetry resource page provides information on how telemetry empowers customers ...

12 Posts

Activity in Tools

Juniper SRX migration questions

Hi I'm working on an SRX migration (first time) and in Expedition, all of the policies are locked (there are only Security policies in this situation). I need to tag all of the rules with a specific tag as I'm combining three firewall clusters into o...

Expedition 1.2.3 Hotfix Information

Version 1.2.3 (Date November 18, 2021) PACKAGE DOWNLOAD INFORMATION Link sha1sum 1e6bddbd61e1e611727a5d88a444473bf699de1b apt update sudo apt-get update; sudo ...

LetsEncrypt integration

Hi, While I know most would use an issued SSL certificate it would be great if PANOS supported LetsEncrypt for requesting SSL certificates for things like the management interface and GlobalProtect.

Resolved! Expedition 1.2.2

Hi Guys, I need some help to find why in my project is 0 ipsec tunnels . I am trying to migrate form fortigate to paloalto. any suggestions is well appreciated, cheers

High Availability - HA Heartbeat Backup

High Availability - HA Heartbeat Backup If HA1 and HA1-backup are configured with data plane ports then Heartbeat backup is needed. If Management port is used as HA1 bkup then Heartbeat backup is not needed. For additional resources regarding BPA, vi...

DawgsFan by L4 Transporter
  • 3 replies

Resolved! Migrating from Cisco ASA, strange DNAT rules

Hi all, I'm trying to migrate configuration from Cisco ASA to Palo Alto NGFW using Expedition. In the security policy I see a lot of strange rules with word "DNAT" prepended in a name and in a tag. These rules always placed immediately after some leg...

2021-11-19 14_50_45-Window.png

panReadOrders crashes daily

Excerpt from panReadOrders.log below. I can manually process csv log files for machine learning but the daily process doesn't work. Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/Per...

Resolved! How to set selective syslog server?

Can I set palo alto to check if syslog server is up before forwarding the log, and if the main syslog server is down then forward log to another server? I have issues that I need palo alto to not forwarding logs to both servers at the same time.

Theerdam by L0 Member
  • 2 replies

cannot install hotfix

Im at version 1.1.103 . It notified me there is version available . I followed all method that mentioned in hofix but it never installed the hotfix update. I followed the following link: LIVEcommunity - Expedition Hotfix Informati...

Jahesh by L1 Bithead
  • 3 replies

FQDN Refresh Time

FQDN Refresh Time For additional resources regarding BPA, visit our LIVEcommunity BPA tool page. View videos regarding BPA Network best practice checks. View videos regarding BPA Policies best practice checks. View videos regarding BPA Objects best p...

DawgsFan by L4 Transporter
  • 2 replies
Register or Sign-in
Top Solution Authors
Top Contributors