Replace firewall order

I have a question about upgrading a firewall to new model.  I've done it in the past but always seem to forget the order.

I have a firewall that is managed by Panorama, with some local policies also.  I have downloaded the device state from the exist

Disk-Space issue

Hi Team,

We are using PA-3020 and the disk space is usually used upto 95% and we have enabled agressive cleaning as well as we do manual cleaning once a week where the disk-space utilisation is below 95% and in a week it gets utilised upto 95%.we need

HTTP2 allowed without strip alpn enable

Dear Team One of my customers wants  HTTP2 benefits with decryption enable.

The customer don't want to enable the strip ALPN because it Downgrades to HTTP1.1 

Can we do decryption with HTTP2 Downgrade with decryption? 

Logged in Admins _cliuser normal?

Hi there,

Today I accidentally discovered the user _cliuser in the widget Logged in Admins on the dashboard of our Palo Alto Firewall.

After a few seconds it was gone.
Unfortunately, I didn't find anything through the search, and seeing this for the f

Layer 2 tunnel on a Palo alto

Can you create a layer 2 tunnel on a palo alto 3050? Is a layer 3 tunnel better than a layer 2 tunnel? Is a layer 2 tunnel more of a private or direction connection than a layer 3?

Experience/feedback with VLAN insertion design for East-West traffic segregation

Experience/feedback with VLAN insertion design for East-West traffic segregation

We are planning to leverage the VLAN insertion design for achieving micro segmentation in out OT network. 

just thought of checking within the Live community team for an

routed interfaces in vsys1 and virtual wire config in vsys2 possible ?

Hi all,

I've not found a conclusive answer in the config guide - although it stands to reason to assume the answer is "yes".

In a multi vsys environment can I have a regular deployment in vsys1 (i.e. routed interfaces acting as DGW for my secured vlan

Cisco Webex Calling - One way calling

Does anyone utilize Cisco Webex Calling with a Palo Alto firewall? We run Webex calling and ever since we switched to the palo alto, calls sometimes will only go in one direction (you can hear them, they cant hear you) or no way (either sides cant he

VLAN Insertion and subinterface - VLAN1

Hi, I'm new to the community and am trying to assist a customer as they work on a PAN and SW integration for an industrial setup. Customer has setup a L2 network between different industrial devices that seat in different VLANs and are all connected

Celebrate CX day - A day all about YOU!

Today, October 5th is Customer Experience Day (CX) day, so the LIVEcommunity wants to celebrate you!

Join the conversation down below and let us know:

What does customer experience mean to you?

Find out what some Palo Alto Networks had to da

How to delete vsys and its associated objects on the Firewall and Panorama

Hello -

I found this article, but it seems fairly outdated:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaFCAS

Is there an updated version?

Regarding threat visibility not being shown.

We have deployed Palo Alto in tap mode to get traffic visibility, we have configured PA VM 100 with active trial license,  We have visibility of Traffic logs but the threat logs are not visible. 

In policy configuration for tap mode we also have assig