About kiwi

Hi @BYates ,   You can filter on the columns. Click the arrow next to the column name. From there select "Columns" and you can check/uncheck all the columns you would like to see. You can also drag/drop the columns to change the order you would like to see.     As far as I know there is no filter option in the search bar at the top to filter out certain columns that way.   Still not what you need ? In that case custom reports also allow you define specific colums in the report.   Hope this helps, -Kim. ... View more

Hi @Henry-ITP ,   It looks like the EBGP neighbors are not transitioning to established state due to the reason that Palo Alto Firewall reject the BGP connection since it treats the AS Sequence in the AS_PATH Attribute advertised by the EBGP peer as Malformed AS_PATH or Unacceptable AS_PATH.   The Palo Alto Networks Firewall has a default behavior in which the EBGP neighbor that advertises the AS_PATH attributes in the BGP UPDATE message will be inspected,  The firewall expect the EBGP neighbors to fill the neighbor's own AS number as the first AS number while advertising the AS_PATH attributes. The PAN-OS behavior is to drop the connection as PAN-OS is enabled with Enforce First AS for EBGP by default.   You will see the error AS-PATH Unacceptable in the output of >show routing protocol bgp peer <peer-name> virtual-router default.   The routed debug outputs collected using the command >debug routed on debug will show the following error snippets while tailing the debug logs: Error code = UPDATE Message Error (3) Error subcode = Malformed AS_PATH (11)   Examine and compare the BGP UPDATE messages > BGP Attributes in the BGP packet captures with the  >show routing protocol BGP peer <peer-name>  virtual-router default output to determine if the remote AS number seen as in the output is advertised in the top left or as the first AS in the AS_PATH Attribute in the BGP UPDATE message packet.    A solution here would be to configure the EBGP Peer to append the AS Path attributes in a manner that includes it's own AS as left most AS or the first of the AS_PATH attributes.   The Work-around configuration that Palo Alto Networks provides to address this situation is to disable the Enforce First AS-Option in the BGP > Advanced settings from the Network>Virtual Routers. (Step 4 - https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/bgp/configure-bgp   Hope this helps, -Kim. ... View more

Hi @Venkat1922 ,   Upon passing, you will receive an email with instructions about how to access the Certification Management System   From there, you can download your eCertificate, logo, and digital badge.Guidelines for including the credential in your email signature are also included.   In case of further questions you can reach out to certification@paloaltonetworks.com    Kind regards, -Kim. ... View more

Hi @IBM-MSS ,   Does it have to be an API call ?   Alternatively, you could schedule a config export (https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/panorama-web-interface/panorama-scheduled-config-export).   If that isn't an option for you or the individual calls aren't working, you might look into other script solutions (expect ?) as discussed here in a similar topic: https://live.paloaltonetworks.com/t5/automation-api-discussions/officially-supported-method-for-panorama-backup-through-api/td-p/218102   Kind regards, -Kim. ... View more

Hi @asiewert ,   Just a quick check, did you by chance "Allow Authentication with User Credentials OR Client Certificate" ?       If you select No, users must authenticate to the gateway using both user credentials and client certificates. If you select Yes, users can authenticate to the gateway using either user credentials or client certificates.   Hope this helps, -Kim. ... View more

Hi @mb_equate ,   As always thanks for your insights !   Kind regards, -Kim. ... View more

Hi @mrahhali ,   You could subscribe to both the LIVEcommunity and Palo Alto Networks YouTube channels:   https://www.youtube.com/@paloaltonetworks/videos https://www.youtube.com/@PaloAltoNetworksLiveCommunity   Kind regards, -Kim. ... View more

Hi @A.Mahmood ,   You can activate trial licenses in the customer support portal. Browse to your asset, click on Licenses and Subscriptions and then click the Activate License button at the bottom right.  You'll find the trial license option below.     If you don't have trial licenses available I suggest that you reach out to your account team.   Kind regards, -Kim.   ... View more

Hi @JuanMAbellan ,   This is expected.  Please check into the feature Hold Mode for WildFire Real-Time Signature Lookup as mentioned by @Raido_Rattameister . With this feature you can prevent the initial transfer of known malware.   Kind regards, -Kim. ... View more

Hi @BitoplusCo.Ltd ,   Try checking the tips provided by @aleksandar.astardzhiev in the following post with similar issue: Telemetry-region-in-ha-firewall    Also, Did you try to set the region in cli ? >configue # set deviceconfig system device-telemetry region ***   Can you confirm using the region with CLI: >show device-telemetry settings | match region > show system state | match lcaas   Please check the step 4 and confirm you are having the same region: Enable Device Telemetry: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/device-telemetry/device-telemetry-configure/device-telemetry-enable   Hope this helps.   Kind regards, -Kim. ... View more

Hi @M.Ochoa ,   Looks very similar to what's happening here: https://live.paloaltonetworks.com/t5/general-topics/ike-v2-asa-vs-pa/td-p/230814   A good place to start is to make sure the IKE and IPSec parameters match on both ends.  This might be as simple as a mismatching PSK.   If you can't find what's wrong then I'd suggest to crank up the debug log level to get more verbose logging and get more details: How to Troubleshoot IPSec VPN connectivity issues    Kind regards, -Kim.   ... View more

Hi @shakeel.qureshi ,   Nextwave is PAN's partner portal and cannot help you with CSP access.   For login assistance please fill out the form located here: https://www.paloaltonetworks.com/services/support/login-assistance   Kind regards, -Kim. ... View more