About YEmreSeven

Thanks @dpuigdomenec, I will try with Expedition2.   BR ... View more

Disk usage for / exceeds limit... issue looks solved (PAN-193452) on 10.2.3. I am planning to upgrade from 10.1 to 10.2. Is anybody had any experience like slowness or issue on 10.2.3 or 10.2.3-h2? ... View more

Hi, you can to send device state directly without any commit from Panorama. Panorama > Setup > Operations > Export or push device config bundle > (select device and OK) > Export    After that load device state from firewall's CLI. ... View more

Hi Deres, thank you for your post. I tried with 2 different email domain which I am the admin email gateway one of them. By the way I can recieve risk reports manually. Also I can recieve the failure notification either. I think reports are not empty because when I tried to see on IoT portal as Kthumula recommendation. I can see reports with full of data. ... View more

Hello Kthumula, thanks for workaround solution. I agree with you, also my recommendation to my customer take reports with this way. I just want to report this problem to related team. ... View more

Hi, you can use "set profiles custom-url-category testlist list *.google.com" in configure mode to add multiple entries from cli as a workaround. ... View more

Hi,   I just update my lab Palo Alto to version 8626 which has only PAN-DB URL Filtering subscription (not Advanced URL Filtering). And new category not seeing under my URL Filtering Profile(s).   Header of this article wroten "New Advanced URL Filtering/PANDB Category: Encrypted-DNS".   But it's look like, only cover for Advanced URL Filtering.  "Palo Alto Networks is releasing a new category called “Encrypted-DNS” under Advanced URL Filtering."   So, what should be the action step should we follow who has only PAN-DB URL Filtering Subsription?   Edit: with Application and Threats update version 8627 Encrypted-DNS Category start seeing now. Thanks! ... View more

Would be nice to check client certificate on HIP profile. ... View more

I would like to delete expired trial license on CSP. ... View more

I would like to have able to make named rule bundle with expand/collapse button. ... View more

You must redirect IPSec traffic throught to tunnel with staticly or PBF metod. Static routing with different metrics should be work. But if you want to use PBF with tunnel monitor profile which monitoring remote Phase-2 site IP, you should use different zone between IPSec tunnels.   Check this kb for dual redundant IPSec, https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POO0CAO ... View more

Hi, firstly, make sure Panorama and firewall's dynamic updates are up to date and the same version. Maybe it could be overrided application or maybe related with duplicated application-tag. Did you see any differance between firewall and Panorama? ... View more

I faced similar issue recently. Backup firewall looked disconnected on Panorama v10.2. And traffic should be flow over active firewall's IPsec. If you see "TCP session closed via injecting RST" on Palo Alto counter, try to change your security rule with any application and tcp/3978 on service and no security profile. I hope it will solve your problem. It was worked for me. ... View more