Number of address groups XXX exceeds platform capacity XXX

Dear community,

We are trying to push for the first time the DG and we get following commit error:

 Number of address groups XXX exceeds platform capacity XXX

We followed the suggestions in link down below of disabling "Share Unused Address and Servic

Address group convert to shared

Running version 9.0.12

Moving to a multiple vsys enviroment from a single vsys, we are not running Panorama.  

Looking to change all of the address objects in the first vsys to "shared" so the others can access them.  Thus far I have not found a way to

Wildfire updates chenge

Hi,

We have configured to download the "wildfire updates" every minute. So whats is the recommended value for this?

Sometimes we face this error, and we are thinking to increase the time for WF updates:

ICMP lost whe commit is done

Anyone has reported in cluster Active/Active with asymmetric routing this behaviour?

When a commit is done, we detect several ICMPs lost through this FW.

Session timer getting reset for new syn packet

Hi,

I got the following scenario.

client -> Paloalto -> Server:1234

The client initiates a tcp session to server always using the same source port and same sequence number (verified in packet capture). The session time out is the default 60 minutes.

The

VRRP on routers connected to Palo Alto Firewalls

I have 2 Palo Alto Firewalls each connecting to Peplink Balance 310x routers. HA is configured between the two Balance 310x routers. What I am trying to achieve is communication between these 2 routers via the 2 FWs. The HA (VRRP) interface is in the

MineMeld - Ubuntu

Hello, can anyone tell me what version of Ubuntu I should use for MineMeld ?

Seeking palo troubleshooting advice

Im involved in a project to migrate away from old asa firewalls to a palo solution.

The process has gone well but myself and peers are stumped with an odd issue and looking for troubleshooting advice.

We have a number of https hosts in a dmz, nat'ed t

Minemeld - Intune

Hi

Can anyone advise if we can use the O365 feeds to incorporate Intune access?

Looking at the O365 external lists that the firewall is retrieving from Minemeld, they doesn't seem to cover all the URLs / IPs required for Intune managed device acc

sequence numbers in log forwarging is becoming out of sync

Dear community!

From time to time one of our firewalls stops forwarding logs to Panorama. We stop/start the log forwarding process as suggested in this link:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFCCA0

We are the

Workflow LDAP Server profile

Hi Expert ,

I would like to know when we have multiple-AD-Server on the same domain or multi-forest I would like to know on LDAP-profile when 

config all server such as limit of 4 server list  it will connect all server available list concurrent or fo

MISP - Filter events/attributes

Hi all, 

First I'm going to explain the use case I'm working on.

I have the MISP integration working properly. Every day I download the new attributes and publish them in a list to be consumed later by different sources.

This is our configuration