New to the Training and Community

Hello All,

As the title states, I am new to Palo Alto training and the Community. I have started the lab Firewall 7.1: Install, Configure, and Manage (EDU-101) and downloaded the lab guide. I would like to login to a device as it states on step 3:

"3

traffic flow

Hi,

I have two zone (trust and trust),

for trust to untrust traffic flow   and untrust to trust , do I need to create two security rules ?

Thanks

slowness in traffic

Hi,

Users complain about the office365 outlook connectivity ,slow submission of email . From PA prespecive what need to be verified and make sure there is nothing from the PA side .

Thanks

Is there a way to paste several IP addresses into an object group or policy?

Suppose I wanted to create object group "blob" with 10.10.10.5 .6 .7 8. .9 - and I'm working in the PAN GUI

- is there a way to paste those five addresses into the address group? It seems like my only option is to click

Add (obj group) Add (address) an

OSPF adjacencies flapping caused by minor changes in Virtual Router.

Hello.

There is a question about OSPF adjacency flapping caused by minor changes in OSPF process.

I planned data-center deployment of PA-5060 HA-cluster. In this plan PA-5060 needs to be attached to OSPF AREA 0, and multiple NSSA areas in different s

How many NPCs do you have install in your 7k?

Hello Community members,

For those who are using 7000 series chassis,  how many NPCs are installed in the chassis?  Are all of the NPC have interfaces connected to the up/down stream routers/switches?  What kind of latency are you experiening when th

qos

Hi,

After egress max set  in the following order ,

If  100 Mb is the internet speed and   through the trust link (1 GB)  traffic is going other than untrust ( internet zone ) , 

the below configuration is ok ? .

class 1 10

class 2 10

class 3 10

class 4  4

Best practice for setting up address groups

Hi

Newbie to PA.

I want to create a address group dynamic (think that might be best.  made up from a group of network addresses in each DC.

So for example if I have 3 DC

dc1 - 10.1.0.0/16

dc2 - 10.2.0.0/16

dc3 - 10.3.0.0/16

I could tag them with "dc_ne

IKE Phase 1 Timeout

IKE is failing to negoriate phase 1.  I get this timeout and then a delete. Any thoughts on the possible cause? I'm thinking

the peer is perhaps not permitting the traffic from this device perhaps at a security device in front of their tunneling firew