Palo vm-series cloudwatch plugin no metrics

Hi all,

I’m trying to get my Palo Alto VM-Series firewall metrics to appear in CloudWatch, but nothing is showing up. I’ve verified the following:

• IAM policy is correctly configured

              Trust Policy

              Permiss

How do I access init-cfg.txt

Per the advisory "Update to Additional PAN-OS Certificate Expirations and New, Comprehensive Certificate Management Process" I am supposed to edit the init-cfg.txt file but I do not know where to find this file nor how to access it. 

I have checked

Failed logins from 127.0.0.1

Hello all. In my VM logs, I'm seeing a failed login like this every 5 seconds:

Authorization failed for user admin via Web from 127.0.0.1 : user admin role is not defined.

This is a single VM-100 implementation, no Panorama. Any help on where this m

Connectivity with Panorama

Hi,

We have deployed VM-Series NGFW in GCP in sandwitch architecture (attached architecture diagram).

Customer having On-Premises Panorama, which they want to integrate with VM-Series NGFW, between On-Premises & GCP IPsec Tunnel is configured.

HA GlobalProtect firewalls in Azure

I would like to deploy GP firewalls in Azure, I would like to configure 2 firewalls which are working active-active to have always some protection if one availability zone will have maintenance always second fw will handle the traffic. I was think to

Deploy PA firewall HA in different availability zone in Azure

Hi all

Understand PA HA deployment supported since PAN-OS 9.0, so firewall pair can be deployed in the availability set so they are in different hardware cluster in Azure. But may I know anyone tried to form the HA in different availability zone in t

How does the Azure Virtual Network discovers that there is Palo Alto Gateway Interface

Hello, I am trying to wrap my head around the PA deployment in azure using PA Series. I am basically following this video on setting up 2 zones, 2 Virtual routers, and route rules.

In my setup the two spoke vnets have UDR with 0.0.0.0/0 route to the t

Unable to deploy VM Series bundle1 and Marketplace agreement fails with ResourcePurchaseValidationFailed

Hello, I am working on a PoC setup having bundle1 Vm series PAFW for a client using Terraform in Azure but no matter what I do I always blocked by Marketplace license. 

• When I create the VM with Marketplace agreement, the terraform api for Azure compl

Palo Alto VM migration on Azure

Log forwarding from Cloud NGFW in Azure to Log Analytics Workspace for Sentinel

Hi

I’m planning to replace Azure Firewall with Cloud NGFW in Azure, managed through SCM.

In addition to using Strata Logging Service (SLS), we also need to forward firewall logs to an Azure Log Analytics Workspace for Microsoft Sentinel (SIEM/SOA

Global Protect Deployment on GCP

Hi,

How we can deploy Global Protect on Google Cloud Platform?

In GCP we have deploy VM-Series Firewall in Sandwich architecture, now we want to configure Global Protect can yoy suggest best pratice for the same.

Data Plane CPU utilization Reaches more than 90 %

model: PA-VM
vm-license: VM-SERIES-4
vm-cap-tier: T2-14GB
vm-cpu-count: 4

Data Plane CPU utilization Reaches more than 90 % . Is there any Limit on PPS for Azure VM-SERIES-4 . I think 525895 Kbps is well under the limit . Is PPS causing the issue ? . Se

Help Needed: NAT & Security Policy Configuration for Azure LB → Palo Alto → DMZ Webserver (Public IP)

Hello Team,

Goal:
I want to access the DMZ Webserver (Public IP) via the Azure Load Balancer Public IP.

Current Setup:

• Azure Public Load Balancer is created with Frontend IP, Backend Pool, and Health Probe.

• Palo Alto Firewall VM is added to the backend po

A new comment has been added on a case [Case#: 03799775] - After upgrade serial number has change and HA is not working: New Serial : 007951000449149

Hi Team,

We are waiting for your new zoom meeting invite. please reply call is already opened