VM-Series on - Sizing, Internet traffic, Scalability Considerations

Dear Members,

Hope you are doing well. We need your support for VM-series FW setup on Azure and considerations.

We are planning to use 2 VM series in internet facing traffic and 2 VM series for internal traffic management.

When deploying these

How to take VM series BYOL trial License?

Hello experts!

I want to take a trial license for BYOL for the VM series next-generation firewall in Azure. Can you please let me know if we can have a trial license from Support?

My second question is, can you provide me the link from where I can co

Issues with Overlay Routing and AWS Gateway Load Balancer

Hey Folks,

I am having difficulties to get Overlay routing working with AWS GWLB and I was wondering is it something that I am doing wrong or missing some configuration element...

Any of you using AWS GWLB with overlay routing enabled?

In my te

SSL Forward Proxy Configuration Question

Trying to get SSL Forward Proxy configured for one of my sites and had a quick question around the configuration. For the certificate I need to put the IP address for the trust side of open flame-grilled. The problem is I am not sure which Interface

Rekey causes VPN tunnel to stop sending network traffic

PA VM-Series syslog ingest log to Azure log analytic workspace

Hi all,

May i know if anyone had experience setting up VM Series FW to ingest the syslog to Azure log analytic? Is it the only is to setup a new intermediate syslog server install with Azure AMA, the VM series will send syslog to the new syslog ser

How to correlate AMI IDs and/or ProductCodeID with Palo Alto Bundles

Trying to figure out the ProductCodeID for each Palo Alto AMI on AWS Marketplace. On AWS, there are four of these: e9yfvyj3uag5uo5j2hjikv74n, a23dm9js55dw4ey8bzjcoq59u, 6njl1pau431dv1qxipg63mvah, hd44w1chf26uv4p52cdynb2o. On AWS GovCloud, there are s

SSL Forward Proxy for custom url with host and path

SSL decrytion works if i set custom url with host only like www.example.local, but failed to decrypt if i set it as 'www.example.local/image/'

i found article below, it should support custom url with host+path, but now i suspect will pan really s

Active FTP in AWS

I'm looking for some assistance on this issue whilst I progress a support case.  Has anyone managed to get Active FTP working through a Palo VM-Series in AWS.  I am getting a problem whereby the control connection outbound on port 21 is successful (y

Expanding a PANOS Firewall VM log file on KVM

There's plenty of discussions here and a couple of KB articles on adding disks to PAN VMs for extra logging space, but the only articles around for extending/increasing the size of the logging disk say to delete it and add a new one in its place. Dow

Site-to-Site IPSEC between AWS and Azure (VM-Series)

I am trying to setup an IPSEC Site-to-Site VPN between our azure and aws environment, both of which have VM-300 series fw's running. I am able to get the tunnel up and see traffic coming across the link, but when i try and reach a resource on either

Downgrade from VM-300 to VM-100 on AWS (PAYG)

I have changed the instance type on my ec2 running PA-VM 10.2.4 from c5.2xlarge to c5.xlarged. As I know the VM license will be changed from VM-300 to VM-100 as well. After I changed, the VM License value on the dashboard was blank and the license wa

How to connect On-Prem Palo Alto Firewall to manage Azure Resources?

Hello Experts!

I have been given a problem statement and I need your help to understand this.

Problem statement: "How to configure and connect On-prem Palo Alto Firewall to manage Azure resources like Virtual Networks, Virtual Machines, etc."

Please