VM-Series in the Public Cloud

Welcome to the VM-Series in the Public Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

firewall deployment in Azure Vmware solution (AVS)

Hi All , We are exploring options to deploy PA VM series firewall in AVS setup . Could you please share any document which we can refer to start our deployment . Thanks ,

Palo VM - The system is shutting down due to masterd initiated

I have a VM series Palo running 10.1.11-h4 and the system log is showing that the device has a system shutdown with a description of the following: The system is shutting down due to masterd initiated. I have not had much luck researching this error or why the Palo VM keeps shutting down due to this error. It was sporadic in nature but has bec...

Required CSSP ID for Palo Alto device hosted on GCP

We need to access support for Palo Alto, for that we're registering our devices to the Palo Alto portal and for that we need CSSP reference Id which is a google marketplace specific Id for the devices.

Vulnerability on VM Series

Hi Guys,I have a few vulnerabilities on my vm-series firewall, which is hosted in AWS, which I'm mentioning below. 1. Palo Alto Networks (PAN-OS) Cleartext Exposure of External System Secrets Vulnerability (PAN-231823) CVE-2024-5916 2. Palo Alto Networks (PAN-OS) Improper Input Validation Vulnerability (CVE-2024-5913) CVE-2024-5913 I've chec...

Firewall deployed on Azure is showing MP constantly high

Hi Team,Please be informed that we have Palo Alto firewall deployed on Azure platform with below details.family: vmmodel: PA-VMvm-license: VM-SERIES-4vm-cap-tier: T2-14GBvm-cpu-count: 4vm-memory: 14351728vm-mode: Microsoft Azurecloud-mode: cloudsw-version: 10.2.9-h1Based on above details, I checked and found out this document which explains maxi...

Encryption on disk volumes on cloud firewalls - AWS or Azure

Has anyone implemented encryption on the disk volumes on Palo VM-500 Firewalls at AWS or Azure ?

Design recommendation for PAN NGFW in AWS

Hi, We are moving our SaaS app to AWS which will periodically query remote endpoints sitting at 20+ of our customer's locations via IPsec. We are looking to keep the AWS architecture simple with a single VPC for the app. What would be an ideal configuration on the PAN that would allow us to segment/isolate each of the customer's traffic so the...

Palo Alto VM series Firewall in Azure, Interface error causing slowness

We have Palo Alto VM series deployed in Azure. Observation is once Interface error increases Firewall become slow and would need reboot. Post reboot all works fine no Interface error and firewall is fast. We are using PAN OS: 10.1.12 Accelerate Networking on Trust and Untrust Interface. Anyone saw similar issue and found the cause of this Pro...

PA-VM-ESX-8.1.10.ova .

Dear Palo Alto Team, I am new to this product and need to do some lab practical for that i need PA-VM-ESX-8.1.10.ova . Please ping me if some one have this image or the url from where i can download it

show "cfg.general.need-acknowledgement-to-login' no_matches" after PA-HDF login"

I use VM-series trial 30 days and take ova file to create vm on esxi after complete installation. and i use default admin/admin but i found it can not work and found error "cfg.general.need-acknowledgement-to-login' no_matches" after PA-HDF login" after PA-HDF login Has anyone encountered this issue after using the VM-Series 30-day trial.We...

Azure Windows Defender alerted to Phonzy.A!ml

Getting an alert from Azure defender and unable to find any reference regarding the alert in the community sections. pps_parport.ko /usr/lib/modules/4.18.0-80.11.2.10.pan.x86_64/kernel/drivers/pps/clients 'Phonzy' malware was detected (Agentless) Trojan:Script/Phonzy.B!ml Trojan pps_parport.ko has anyone seen this and is this a...

Mellanox Drivers Support for PAN OS on VM series in Public Cloud

Do we have compatibility matrix for drivers for PAN OS version. Below is what I found but not sure if this applies to Public Cloud. What version of PAN OS Support both Mellanox 4 and 5 drivers. As per below support is only for 4. https://docs.paloaltonetworks.com/compatibility-matrix/vm-series-firewalls/sr-iov-and-dpdk-drivers

cfg.genral.acknolegment to login : NO MATHES palo alto

Unable to create tac case

We get a single sign-on error when we open the tac-case to Palo Alto Network. We opened a portal from incognito windows and still, we are getting same errors.

XFF IP address not seen in traffic logs

I am trying to get the PA firewall to display and use the the x-forwarded-for (XFF) header in incoming web browsing traffic. I must be missing something. We have an Azure application gateway which is inserting the client_ip in the header, and stripping the port, as instructed: Use XFF IP Address Values in Security Policy and Logging (paloalt...

Discussions