Vulnerability on VM Series

Hi Guys,I have a few vulnerabilities on my vm-series firewall, which is hosted in AWS, which I'm mentioning below. 1. Palo Alto Networks (PAN-OS) Cleartext Exposure of External System Secrets Vulnerability (PAN-231823) CVE-2024-5916 2. Palo Alto Networks (PAN-OS) Improper Input Validation Vulnerability (CVE-2024-5913) CVE-2024-5913 I've chec...

Firewall deployed on Azure is showing MP constantly high

Hi Team,Please be informed that we have Palo Alto firewall deployed on Azure platform with below details.family: vmmodel: PA-VMvm-license: VM-SERIES-4vm-cap-tier: T2-14GBvm-cpu-count: 4vm-memory: 14351728vm-mode: Microsoft Azurecloud-mode: cloudsw-version: 10.2.9-h1Based on above details, I checked and found out this document which explains maxi...

Encryption on disk volumes on cloud firewalls - AWS or Azure

Has anyone implemented encryption on the disk volumes on Palo VM-500 Firewalls at AWS or Azure ?

Azure VPN Connection issues

Hi All, Appreciate any help with an Azure VPN connection. I have a couple that works but this one is problematic. I have configured to match the Azure configuration so my end: IKE: AES-256-CBC, SHA256, Group 14 and Key 8Hrs IPSEC: AES-256-CBC, SHA256, No-PFS and key 27000secs. Gateway: Their Peer IP, My Peer IP, PSK, IKEv2 mode, Passive...

Design recommendation for PAN NGFW in AWS

Hi, We are moving our SaaS app to AWS which will periodically query remote endpoints sitting at 20+ of our customer's locations via IPsec. We are looking to keep the AWS architecture simple with a single VPC for the app. What would be an ideal configuration on the PAN that would allow us to segment/isolate each of the customer's traffic so the...

Palo Alto VM series Firewall in Azure, Interface error causing slowness

We have Palo Alto VM series deployed in Azure. Observation is once Interface error increases Firewall become slow and would need reboot. Post reboot all works fine no Interface error and firewall is fast. We are using PAN OS: 10.1.12 Accelerate Networking on Trust and Untrust Interface. Anyone saw similar issue and found the cause of this Pro...

PA-VM-ESX-8.1.10.ova .

Dear Palo Alto Team, I am new to this product and need to do some lab practical for that i need PA-VM-ESX-8.1.10.ova . Please ping me if some one have this image or the url from where i can download it

show "cfg.general.need-acknowledgement-to-login' no_matches" after PA-HDF login"

I use VM-series trial 30 days and take ova file to create vm on esxi after complete installation. and i use default admin/admin but i found it can not work and found error "cfg.general.need-acknowledgement-to-login' no_matches" after PA-HDF login" after PA-HDF login Has anyone encountered this issue after using the VM-Series 30-day trial.We...

Azure Windows Defender alerted to Phonzy.A!ml

Getting an alert from Azure defender and unable to find any reference regarding the alert in the community sections. pps_parport.ko /usr/lib/modules/4.18.0-80.11.2.10.pan.x86_64/kernel/drivers/pps/clients 'Phonzy' malware was detected (Agentless) Trojan:Script/Phonzy.B!ml Trojan pps_parport.ko has anyone seen this and is this a...

Palo Alto deployment in Azure VMware Solution

Do you have routing and other configuration details for these topologies mentioned in the link provided. For eg: creating transient/management segments and isolated tier 1 gateways etc. https://techcommunity.microsoft.com/t5/azure-migration-and/firewall-integration-in-azure-vmware-solution/ba-p/2254961 However, into the NSX-T environment of ...

Azure Transit Build with VNG/LNG

Hi, I have build the configuration in Azure called the "Transit Vnet Build" with Azure Front LB, 2 Palo Alto VM, Azure Back LB. It works well. I used 3 NIC (management, untrust, trust). I want to connect this transit vnet to my local infrastructure. It seems that the best way to do that is using Azure VNG/LNG. So I build the tunnel and the confi...

Mellanox Drivers Support for PAN OS on VM series in Public Cloud

Do we have compatibility matrix for drivers for PAN OS version. Below is what I found but not sure if this applies to Public Cloud. What version of PAN OS Support both Mellanox 4 and 5 drivers. As per below support is only for 4. https://docs.paloaltonetworks.com/compatibility-matrix/vm-series-firewalls/sr-iov-and-dpdk-drivers

cfg.genral.acknolegment to login : NO MATHES palo alto

cfg.genral.acknolegment to login : NO MATHES palo alto

cfg.genral.acknolegment to login : NO MATHES

Unable to create tac case

We get a single sign-on error when we open the tac-case to Palo Alto Network. We opened a portal from incognito windows and still, we are getting same errors.