About ChirPatel

How do i change the Palo Alto Internet Configuration from two ISP with 2 sets of Public IP Address range to single ISP with BGP ... View more

Since Migrating to PA-460 PAN-OS 10.1.3, from PA-3020 PA-OS 9.1....... SMS-message-based multi-factor authentication (MFA) did not display a prompt to enter the authentication code.   PA-3020 with PAN OS 9.1  Firewall forwards incoming Global Protect authentication Request to Microsoft RADIUS Server with NPS extension for Azure, which allows us to use the following Two Factor Authentication methods ( all four Two Factor methods were working on PA-3020)   - SMS, - PhoneCall, - OTP Code generated from Microsoft Authenticator APP or  - Approve Notification on Microsoft Authenticator APP    Over the weekend we migrated to PA-460 Config was migrated between the firewall using config export/import option Since the migration, PA-460 is works well -- except Global Protect Two Factor (it's working partially)     As of now following two-factor authentication methods are not working - SMS - OTP Code generated from Microsoft Authenticator APP   Users with Global Protect Client do not get the option to enter the SMS verification code or OTP Code generated from Microsoft Authenticator.   ... View more

Cant upload Wildfire update after manually activating the license, we are getting ready for PA migration (replacing old PA with with new) hence new PA firewalls are not connected to live environment and doesn't have internet connectivity. config was transferred using XML import / export. All the subscriptions are activated on the new PAs and dynamic up uploaded manually using web interface.  For some reason we are unable to install Wildfire updates using same mechanism.  We can upload the wildfire update, however when I use install from file option, I am unable to locate wildfire update in the dropdownlist.   These new firewalls has never connected to internet or PaloAlto network for that reason, can this be the reason?   ... View more