About Amin2

Hi   I am trying to start utilizing Ansible for upgrading our Palo firewalls.  Currently, I am trying to run playbook of upgrading PAN OS device using Palo Github collection (https://github.com/PaloAltoNetworks/ansible-playbooks).  I ran the following playbook, and I am getting the following error message:   ansible-playbook upgrade_single_major.yml --extra-vars "base_version=9.1.0 target_version=9.1.13-h3"   PLAY [palo] ****************************************************************************************************************************************************************************************************************************************************   TASK [Gathering Facts] ***************************************************************************************************************************************************************************************************************************************** ok: [LAB_220_PA]   TASK [Download PAN-OS version] ********************************************************************************************************************************************************************************************************************************* fatal: [LAB_220_PA]: FAILED! => {"changed": false, "msg": "Missing required library \"pan-os-python\"."}   PLAY RECAP ***************************************************************************************************************************************************************************************************************************************************** LAB_220_PA                 : ok=1    changed=0    unreachable=0    failed=1    skipped=0    rescued=0    ignored=0       I am using Mac OS, this is my ansible and python install details:   amohammed@******WMD6M ansible-playbooks % ansible --version ansible [core 2.12.5]   config file = /Users/amohammed/ansible-playbooks/ansible.cfg   configured module search path = ['/Users/amohammed/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']   ansible python module location = /usr/local/Cellar/ansible/5.8.0/libexec/lib/python3.10/site-packages/ansible   ansible collection location = /Users/amohammed/.ansible/collections:/usr/share/ansible/collections   executable location = /usr/local/bin/ansible   python version = 3.10.4 (main, Apr 26 2022, 19:42:59) [Clang 13.1.6 (clang-1316.0.21.2)]   jinja version = 3.1.2   libyaml = True ... View more

Hello We have PA 3060 device on 8.1 code, I know its current capacity is 40 zones.  If I upgrade to 9.1 will that capacity for the zone increase?   Thanks -Amin     ... View more

Hi   I am trying to study for PCNSE using the digital learning option for PAN-OS 10.1. I don't see a clear option for a study path on Beacon. In previous test versions there were the following digital classes: Edu -110 - Strata Edu-114 - Threat Prevention Edu-120 - Panorama Edu-330 - Troubleshooting (not sure if there was a digital version available) Does anyone have any updates on 10.1 curricula?   Thanks Thanks ... View more

Hi could someone explain the difference between these 2 offerings from PA? ... View more

Hi  I wanted to update weak ciphers on a PA-VM using the document below, I wanted to apply the change via Panorama but I don't see the correct config to apply. I have tried the following:   >set cli config-output-format set #set template "template name" config vsys vsys1    Is this the correct format?  I am not sure where I can reference system ssh and the rest of the commands in the document. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PN5bCAG   Any assistance would be appreciated.   Thank you  -Amin     ... View more

Hi  I need some guidance on setting up BGP peer with my ISP, this is a new connection.  I have external interface setup and I can ping to next hop and route to public internet.  I need to advertise the /24 block network that my ISP assigned me.  This PA will be used as GP Protal and GW, and they have been assigned IPs from /24 block.  Is there document I can follow to make this advertisement to my ISP?  So far I found for advertise multiple ISPs or docs that pertain to route filtering.   Thanks in advance ... View more

I have been going through the PAN OS 9.0 curriculum and I am confused about ACC Global Filters.      Three way to apply a GF: Set Global filter from the table from any widget and apply the attribute as GF. Promote LF as GF, when this is done it will update on all the TAB in ACC Define a GF: Define a filter using the GF pane on the ACC.   To me items 1 and 3 look the same?    Any clarification someone could give would be a great help.   Thanks -Amin ... View more