VM-series Failover issue

We have deployed Palo Alto VM-Series firewalls in Azure in Active/Passive mode. When the active firewall fails, the passive firewall successfully becomes the active one. This behavior is reflected correctly in both the firewall interface and the floating IPs within the Azure portal, and the traffic flow is unaffected during this transition. Ho...

AWS VM Series GWLB with Overlay routing - outbound and inbound

Hi, I’m using 2 active VM series firewalls for outbound sessions with overlay routing, with GWLB and Transit Gateway (TGW) between the Application VPC and the Security (firewall) VPC. This is working as expected. Inbound connections fail to establish. The need for overlay routing is for managing NAT and VPNs on the firewall. An external (3rd pa...

Ingest Palo Alto logs to SIEM tool (Splunk) using Eventhub

Hi All, We're looking into some sort of cloud-based solution to route our Palo Alto firewall logs to across our customer base. I was intrigued by the Event Hubs (https://azure.microsoft.com/en-us/products/event-hubs/) solution as a way to push logs to it and then ingest them from there into our SIEM (Splunk). Is there a way, we can directly pu...

Palo Alto VM series deployment in Azure Cloud

Hello Everyone, We are planning to deploy two VM series firewalls in our Azure landing zone. In our case, Palo Alto firewall is like a data center firewall and we have a Fortigate in the perimeter. All outbound traffic from cloud servers will hit the Palo Alto first and then move to the Fortigate and then to the internet. All inbound traff...

Does PA VM-Series Firewall support Sub interfaces in OCI Cloud?

firewall deployment in Azure Vmware solution (AVS)

Hi All , We are exploring options to deploy PA VM series firewall in AVS setup . Could you please share any document which we can refer to start our deployment . Thanks ,

Palo VM - The system is shutting down due to masterd initiated

I have a VM series Palo running 10.1.11-h4 and the system log is showing that the device has a system shutdown with a description of the following: The system is shutting down due to masterd initiated. I have not had much luck researching this error or why the Palo VM keeps shutting down due to this error. It was sporadic in nature but has bec...

Required CSSP ID for Palo Alto device hosted on GCP

We need to access support for Palo Alto, for that we're registering our devices to the Palo Alto portal and for that we need CSSP reference Id which is a google marketplace specific Id for the devices.

Vulnerability on VM Series

Hi Guys,I have a few vulnerabilities on my vm-series firewall, which is hosted in AWS, which I'm mentioning below. 1. Palo Alto Networks (PAN-OS) Cleartext Exposure of External System Secrets Vulnerability (PAN-231823) CVE-2024-5916 2. Palo Alto Networks (PAN-OS) Improper Input Validation Vulnerability (CVE-2024-5913) CVE-2024-5913 I've chec...

Firewall deployed on Azure is showing MP constantly high

Hi Team,Please be informed that we have Palo Alto firewall deployed on Azure platform with below details.family: vmmodel: PA-VMvm-license: VM-SERIES-4vm-cap-tier: T2-14GBvm-cpu-count: 4vm-memory: 14351728vm-mode: Microsoft Azurecloud-mode: cloudsw-version: 10.2.9-h1Based on above details, I checked and found out this document which explains maxi...

Encryption on disk volumes on cloud firewalls - AWS or Azure

Has anyone implemented encryption on the disk volumes on Palo VM-500 Firewalls at AWS or Azure ?

Design recommendation for PAN NGFW in AWS

Hi, We are moving our SaaS app to AWS which will periodically query remote endpoints sitting at 20+ of our customer's locations via IPsec. We are looking to keep the AWS architecture simple with a single VPC for the app. What would be an ideal configuration on the PAN that would allow us to segment/isolate each of the customer's traffic so the...

Palo Alto VM series Firewall in Azure, Interface error causing slowness

We have Palo Alto VM series deployed in Azure. Observation is once Interface error increases Firewall become slow and would need reboot. Post reboot all works fine no Interface error and firewall is fast. We are using PAN OS: 10.1.12 Accelerate Networking on Trust and Untrust Interface. Anyone saw similar issue and found the cause of this Pro...

PA-VM-ESX-8.1.10.ova .

Dear Palo Alto Team, I am new to this product and need to do some lab practical for that i need PA-VM-ESX-8.1.10.ova . Please ping me if some one have this image or the url from where i can download it