About Swetang

Hello Team,   I just wanted to know that does PA SD-WAN supports OSPF ?? Or it only supports BGP.   My use case is as below  Branch and a Hub to SDWAN I have Internet links and Orange MPLS links and I have OSPF on OBS router and on the firewall  After config of sd-wan i have Internet links and the SDWAN Tunnels (on the branch) ad also Internet links, the SDWAN Tunnels (Towards Hub side)   routing with Orange (OSPF) should be changed  All firewalls use OSPF routing with the MPLS WAN routers and static routing for the internet ... View more

Hi Team,   I import the configurations from managed device to panorama then export to managed devices of our A/P firewalls. everything went well. but when I see the summary on panorama passive device template   showing   as in   sync   but active device template disappear.    PFA below for your reference, ... View more

I am having an Existing setup of cisco where all my ISP are terminated which is a standlalone device ,now migrating to PA 3220 with HA,but over here my ISP will be terminated on switch and from switch one cable to PA 3220 will be going...how do i migrate interfaces of all ISP(Approx 5) to Palo Alto(1). How do i do remap,in this case,will i need to manually configure the policy and static route with respect to old cisco firewall. ... View more

Since i can see the stable version mentioned for panorama is 9.1.4,but when i go to support portal under panorama base images to download 9.1.4 i cannot the file...i am looking to install it on vm/esxi.   Let me know the stable version from 9.1.x and 9.0.y family according i will install and also chose image for my firewall also ... View more

    I have l3 switch , new vlan is created and its default gateway is PA FW..A machine when connected to trust interface eth1/2 is able to access the internet...but when machines are connected to switch with trust IP range,internet is not working. My machines are not able to access internet,but when i connect a single machine to FW Trust Lan interface internet is working.   Default route is given on FW is 0.0.0.0/0 and next hop is ISP Ip(182.71.x.x)..kindly tell me what need to done for machine to get internet. ... View more

I have configured trust and untrust zone with respect to their interface.   I create policy of any any...my firewall internet only work when i configure service route and destination as outgoing interface,if i set it as default and select use management for all interface...my firewall lose its internet connectivity for upgrading OS,URL updates.   My DNS is 8.8.8.8 and update is updates.paloaltonetworks.com ... View more

In my organisation,Can i block personal gmail and allow corporate gmail access and its connected application .?   WHat are steps of that policy ,pls share ... View more

Hi,   I want to migrate configuration from fortinet to palo alto ,can you let me know the procedure ahead. ... View more

i want to configure security policy based and want to allow access only by end user hostname...can we do that? ... View more