About emr_1

At least you need to take care of two locations.   One is DNS proxy as mentioned in previous post:     Secondary, you need to configure to use dns proxy by system (pan device itself) as below:     Here is my result: ==== admin@PA-455> ping host abcsampledomain.com  <<< Before configuring above two ping: abcsampledomain.com: System error admin@PA-455> show dns-proxy static-entries all Name: dnsproxy Static Entries: 2 Domain IP/Name Type Class TTL Hits Static ----------------------------------------------------------------------------------------------------------------------------- 4.3.2.1.in-addr.arpa abcsampledomain.com PTR IN 0 0 config abcsampledomain.com 1.2.3.4 A IN 0 0 config admin@PA-455> ping host abcsampledomain.com <<< After configuring above two PING abcsampledomain.com (1.2.3.4) 56(84) bytes of data. <<< you can see IP address ====   ... View more

You can see currently installed version which is not preferred if you uncheck both boxes at bottom. Here is sample from my testbed:       After uncheck.... ... View more

Even I don't see such issue, if I can't find why and who uninstall GP app, I would protect it from uninstallation by password: https://docs.paloaltonetworks.com/globalprotect/5-1/globalprotect-app-new-features/new-features-released-in-gp-app/uninstall-option-globalprotect-windows   To try to figure out who uninstall GP app, you might able to find any hint from event viewer. FYI: https://www.prajwaldesai.com/find-who-uninstalled-application-from-server/     ... View more

From the keyword "pre rules", I guess you are using Panorama, and also you are configuring new security rule directly to PAN device (PA-xxx). If so, you need to configure new rule on panorama, not on PAN device. Here is brief diagram how security rule works when you are using panorama.           In addition to above, you can't add/edit/delete rules which are pushed from panorama on PAN device.   Hope this helps you. ... View more

Just wondering it is not caused by GP because I can see some post outside the palo alto https://www.google.com/search?q=18.2+mail+problem I would recommend you to narrow down little more. ... View more

If my understanding is correct, you can't create new legacy mode with latest pan-os. If you need lagacy mode environment, I believe you need to prepare very old image with lagacy mode and then keep upgrading it 'til the latest. https://docs.paloaltonetworks.com/panorama/11-1/panorama-admin/panorama-overview/panorama-models Legacy mode ( ESXi and vCloud Air only )—In this mode, the Panorama virtual appliance receives and stores firewall logs without using a local Log Collector (see Deploy Panorama Virtual Appliances in Legacy Mode with Local Log Collection). By default, the virtual appliance in Legacy mode has one disk partition for all data. Approximately 11GB of the partition is allocated to log storage. If you need more local log storage, you can add one virtual disk of up to 8TB on ESXi 5.5 and later versions or on vCloud Air. Earlier ESXi versions support one virtual disk of up to 2TB. If you need more than 8TB, you can mount the virtual appliance in Legacy mode to an NFS datastore but only on the ESXi server, not in vCloud Air. This mode is only available if your Panorama virtual appliance is in Legacy mode on upgrade to PAN-OS 10.0. On upgrade to PAN-OS 9.0 and later releases, Legacy mode is no longer available if you change to any other mode. If you change your Panorama virtual appliance from Legacy mode to one of the available modes, you will no longer be able to change back into Legacy mode.     ... View more

> configure # delete rulebase security rules "TESTING2" log-setting ... View more

I believe sonicwall is not supported. It's not in this list: https://live.paloaltonetworks.com/t5/expedition-articles/expedition-supported-3rd-party-vendor-matrix/ta-p/336922 ... View more

You can customize log format. Even there is no document for recent version, refer to 10.0 is enough to understand. FYI: https://docs.paloaltonetworks.com/resources/cef   For each log field, another doc is useful. https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions   ... View more

Oh,okay...then you don't need this license. Just delete it from CLI   First, type in question mark to list all license files on your platform delete license key ?   Then type in specific file name delete license key <name>     Sample: ==== > delete license key ?   GlobalProtect_Gateway_2024_05_31.key 2024/08/01 01:57:21 0.3K Logging_Service_2022_08_09.key 2023/12/19 15:52:21 0.3K PAN_DB_URL_Filtering_2023_05_18.key 2023/12/19 15:52:21 0.3K   > delete license key Logging_Service_2022_08_09.key ==== ... View more

You mean even you are not purchasing Logging Service, your platform has Logging Service license?   If you are surely you are not using Logging Service, you can ignore it. (but you will keep receiving alert everyday)   If you are using Logging Service for other service, for example; you have Prisma Access, activated Logging Service license will be applied to all devices under same CSP. You need to check internally.   If your devices are under control of ASC (Authorized Support Center), ask them. Possibly ASC mistakenly activate their Logging Service and applies to your devices (same logic as above) ... View more

lcaas is Logging Service. You can check your license via CLI with following command : request license info Here is sample output from my lab   > request license info License entry: Feature: Logging Service Description: LAB Serial: xxxxxxxx Authcode: Issued: December 18, 2023 Expires: January 05, 2025 <<< I believe this field should be 2024/10/30 on your platform Expired?: no Log Storage TB: 1     If you already have renewed Logging Service on the cloud, please fetch the latest. CLI is "request license fetch" ... View more

https://security.paloaltonetworks.com/PAN-SA-2024-0010   This is not related to PAN-OS (FW/panorama)   https://security.paloaltonetworks.com/CVE-2024-9468   This is related to PAN-OS, however, since your platform is PA-5060 and it reaches end-of-life and last supported platform is 8.1, you can not get any information/update for it. I believe nobody knows the answer.   FYI https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates   ... View more

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g1umCAA KB is available here. In addition to above, there is no way to stop your pointed message by configuration. Only way is to downgrade GP agent, though you need to take care of EoL for GP v6.0 https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary   ... View more