About CarloMun

Hi,   I currently manage a group of Palo Alto FW Devices (5220, 800, 3200 and 200 series) via a Panorama M-100 Series Appliance.   I would like to know if Panorama pushes automatically PAN OS SW Update (at the PAN OS - level only - not AV, AppID or Wildfire signatures) to the managed devices (after having them downloaded from the internet, hence assuming a working Internet connectivity) and, if this is the case, how this behaviour can be changed/configured.   I have searched through the Panorama Admin Guide for this specific topic, but couldn't find a clear answer. Any reference to technical documentation would also be appreciated.   Thanks, ... View more

Hi,   we have a pair of PA 5220 appliances currently running only the default vsys (vsys 0) in an HA (Active / Active) Setup.   We would like to add additional vsys instances and also have each of the new instances running in a HA A/A Setup.   Would the HSCI Port (currently configured for HA2 and HA3 HA A/A Traffic/Sessions support) as well as the HA1A and HA1B ports be able to serve ALL VSYS instances running on the 2 physical appliances ? (I would expect so)   Are there any limitations that we should be aware of when deploying such scenario ?   Is there any technical documentation focusing on this ?   Thank you. ... View more