Palo Alto Authentication Failed Error Code : -1 after successful MFA SSO

Hi Team,

Getting Authentication Failed Error Code : -1 after successful MFA SSO. 

It actually takes the UN and PW, also was able to authenticate with my yubikey, but then it gives this error message.

Any fix to this please?

not able to open support case

Hi,

When I try to open support case error message coming up saying "Problem Category is missing".

Although I select the product as PAN-OS while creating the case.

BR,

Alaa

Best upgrade practice with HA Pair ?

We are preparing to update this weekend to 10.2.7 to resolve the expiring root certificate issue. We have an HA pair that we want to failover while upgrading as to not disrupt service. While I have the upgrade path from the Palo documentation what I

Setting Up Double NAT over a site-to-site VPN

Hi,

I've been trying to read up on if it is possible to set up what Cisco would call "Twice NAT" on Palo Alto, and while there seems to be a lot out there for really odd fringe cases, I'm struggling to find anything on what I think would be a reall

BGP failover not working as expected

Hi

Our PA 220 is running 2 eBGP's  with 2 CE (WAN) routers.

Those 2 CE routers will run eBGP with respective ISP's. 

We control the routing through Local preference. 

Routes learned via primary CE 1 has LP of 500

Routes learned via secondary CE

Paloalto can't block hotspot shield.

Dear all,

I am currently facing paloalto can't block and see hotspot shield app.

Our organization do not want to use ssl decryption to block hotspot shield.

Any other solutions to block hotsport shield without decryption ???

Thanks.

Panorama Upgrade

Hi Team,

I am setting up a new Panorama. Where not even created the Device Groups and Templates yet. I need to upgrade the Panorama but i am not able to do that. I am able to reach internet but unable to fetch the softwares, is there anything that ne

redistribute static routes including next hop as next VR in ospf

we have two VR

1. Default :

eth1/1 -  10.1.1.0/24  L3_LAN Zone

eth1/2  - 10.1.2.0/24 L3_DMZ zone

eth1/3 - internet

2.New_VR

tunnel interface tunnel.1_global protect tunnel

eth1/4 - Branch

Core ------- PA ------------------Branch router

We want to enable osp

auto commit issues after upgrade to 10.x

Hi,

We started to experience auto commit finishing delay on our PA-5220 after the upgrade to 10.x.  We have a pair of HA PA-5220 in active/passive mode, we never had an auto commit issue before in previous updates, reboots of the firewalls. We have

Upgrade of 5260

Dear Team,

I have upgraded PA-5260 from 10.0.12 to 10.1.9-h3 and faced weird, issues after the upgrade the customers monitoring system has generated some errors like this >> "device 'slot-1 data processor' status is 'down' "" we have checked and slot1

Manual Gateway Selection in GP

Hi Team,

We are unable to select the Gateway manually in GP may i know how to set this up? Users needs to get the option to select the Gateway manually. This is quite urgent please help.

Regards,

Sanjay S

RFC1006 protocol over TCP

Hi has anyone heard of this protocol, give simple example of how it works AND whether or not it's supported by Palo Alto ? 

IPSec VPN tunnel question, Proxy-ID and peer IP same?

I am creating a static routing IPSec VPN tunnel with a 3rd party.  The 3rd party wishes to NAT their hosts to their peer IP, which means the remote peer IP will be the same as the proxy-ID IP.  How do I support this?