VM-500: HA1 Down, HA1 Backup Up, HA2 Up.

NOTE: 

This appears to have been an issue in the Cloud space. I suspect a VMotion or reboot of the VM Host resolved the problem as an unrelated issue with spinning up access to the VM was resolved at the same time this HA issue was resolved and no co

Configuration VM-Series on Azure cloud

Hello

I'm deploying my first Palo Alto on Azure (I already deployed physical appliance) but I'm blocked. 

I would like to deploy this type of design. The global network defined is 10.200.0.0/16 who are splitted in serverals sub-networks. I have o

age out error

Hello

I'm deploying a Palo Alto on Azure. I want to use 2 interfaces : one interface (eth1/1 configured with public-vr router) dedicated for Internet outbound (including for users connected with Globalt Protect) and one interface (eth1/2 configured

Packets being denied intermittently.

My company has had an issue for over a year and Palo Alto cant figure it out.  We're using Azure's Palo Alto offering.

* We have a security rule that is sourced from our trusted paas  and destined  to Azures Paas storage.  Port 1433 app id: mssql db

AWS and Inbound SSL Inspection

Hello all,

After some help as not getting much from support.

We have a customer with an Amazon AWS solution. We have a web server in the trust zone and we have been asked to set up inbound ssl inspection.

There is a load balancer after the firewall

GCP Deployment

Hi,

I'm trying to deploy two tier architecture in my lab.

Below is the VPC & Subnet  details:-

PA-VM has been deployed successfully & also

how to setup palo alto for dual stack for IPv6 internet

Hi,

I have configured PAVM in azure with IPv4 and everything is working fine. so I decided to add IPv6 as a Dual stack. And Azure provided me single Public IPv6 and it configures on the Azure load balancer and mapped with an untrust interface on the

GP vpn slow perfomance is AWS N virgina region

Hi 

User reporting Global protect vpn perform slowness even in spilt tunnel while accessing the AWS resource , palo alto vm deployed in AWS us region and all AWS resource are on US region.

AWS keypair failing authentication to PA-VM

AWS ssh publickey failing while connecting to PA-VM, falls back to password authentication which obviously fails. I suspect some of this behavior is due to macos and openssh deprecating ssh-rsa, PAN-OS 9.1.14 offers ssh-rsa which is rejected by defau

Azure multiple public front ends on load balancer

Using multiple front end IPs to split my internet facing applications. Seemed to solve the health probe issue with splitting static 168.63.129.16/32 azure routes between virtual routers, but inbound traffic doesn't seem to know where to go. Single pu

FTP Server behind Palo Alto pair and Azure External Load Balancer Not getting directory

I have a "HA" pair of firewalls in Azure sitting behind an external Load Balancer. I have a FTP server that I have to configure behind the firewalls.  I am able to connect locally to the FTP server and it works as expected, but when I point the FTP c

Azure NAT Rule closing VPN Tunnel

Good Afternoon,

We have a VPN tunnel established b/t an Azure VPN GW and a PA 3020 running 9.1.10.

We need to add a NAT rule on the Azure side.  When we apply the NAT rule, the tunnel closes.

Azure docs on this topic are less than helpful and I have not

VM-300 Inaccessible and Failover Occurred

Hello all, 

Currently, my customer is working on 9.1.12-h3 and they experienced Inaccessible and Failover Occurrences in VM-300.

Therefore, I looked around TSF and found out that failover proceeded after the message pan_hash_init(pan_hash.c:113): nb

Deploying Panorama to Azure gaining initial access.

I am deploying a Panorama VM into Azure. I setup the VM according to the documentation at https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/install-the-panorama-virtual-appliance/insta