General Topics

Virtual-Wire connectivity during reboot

Hi all,

I know some IDS/IPS are able to keep the network connectivity during a reboot. Then it does not stop the trafic.

Does the PA able to do the same in Virtual-Wire mode ? Or in other mode ?

The aim is to upgrade the appliance in a production enviro

QoS data in logs

Hello PAN,

Is there any way to obtain QoS data from the PAN logs other than doing a "show session id" CLI command in the current release 3.0.5? My customer would like to be able to see how much traffic is hitting the QoS classes and which traffic is h

Defining Policies, Profiles, etc via CLI

Our primary interface with devices and management systems is through the CLI.  Essentially, what I need is a guide that explains the syntax and how to create/update/delete policies, security profiles, etc via CLI.  (Neither the CLI Reference nor the

Troubleshooting PAN-Agent connectivity

Hello, I have PAN OS 3.0.5 installed on a cluster (active passive)

The passive device seams to have problem to contact PAN

As you can see from ommand below 10.44.36.125 Agent can't be reached (on active is ok)

(active)> show pan-agent statistics
Name    

Log files meaning

Hello,

With command tail I can read log from PAN FW. ...

questions :

what's difference between mp-log and dp-log ?

what does the mp-log files below contain/mean (i.e ha_agent.log is for ha system) ?

appWeb.log.old                masterd_manager-infra.log
b

Unable to redirect to desired website after successful authenticated with RADIUS server..

Hi All,

I encountered a situation :

User in the RADIUS server authenticated successful with CISCO ASA RADIUS Server or Microsoft RADIUS but unable redirected to the desired page such as www.google.com or www.yahoo.com... The page just stay at the capti

Secondary interface addresses

I'm trying to add more of the public IP addresses issued by my ISP to the external port on my PA-500.  When I try to commit the config, I get this error:

• routed: In virtual-router Incoming: address 12.x.x.x/27 on interface ethernet1/1 has overlapping

Can I check if a connection was dropped by the firewall?

I frequently have people coming to me asking if I can check if a connection is dropped on the firewall.

Allow me to give you an example:

We have a trunk setup between a cisco callmanager and one from Alcatel. All traffic between the 2 systems flows thr

DHCP - Not setting Subnet, issues with PXE Boot

We are having an issue with our new Palo Alto 2050.

We are using the DHCP server on the 2050 in conjunction with a PXE to iSCSI system.

Using a different firewall/router with integrated DHCP server - the system works fine.

With the 2050 - it doesn't.

We