General Topics

IPSec VPN not getting any response from peer

Hello,

i'm having a weird problem with an IPSec VPN on my Palo Alto.

This morning tunnel was working fine, but after mistakenly denying ike and ipsec requests on my firewall, the VPN went down. I obviously did a quick rollback and peer IP is now

Virtual routers Impact

Hi Team,

if we create extra virtual routers does it impact CPU/RAM utilization i paloalto?Also do we need manually assign CPU/RAM allocation for newly creating virtual routers in paloalto ?

PCI Compliance - 86476 Web Server Stopped Responding

First time in years, getting this failed result to a PCI scan. 86476 Web Server Stopped Responding.

Their tech suggests it has something to do with my PAN WAF/IDS and they have a bunch of IP addresses/ranges that I can whitelist. I find this odd as

upload and download speed issue

Hi,

We are using PA820
i have a isp connection of 700mps up/down.and i have an internal server that can access from public and the domain is pointed to the public ip.the internal server is in my dmz zone and isp is in untust only untrust interface is

QOS Not Working Propely

Hi Friends,

We have a customer experiencing issues with QoS. After enabling QoS, a noticeable reduction in internet bandwidth was observed. Although QoS was configured correctly, the bandwidth dropped from 25 Mbps to 14 Mbps on a 30 Mbps link.
To te

I cannot delete a virtual wire interface

Hello,

I've already looked at similar topics here, but it did not help me.

I'm supposed to set up a DHCP server on ethernet1/2 and to do it, I need to set up ethernet1/2 as a layer3 interface on the CLI first.

Initially, I tried these commands:

Moving interface configuration and sub interfaces to another interface on same firewall

Hi,

I want to move all interface from a 1gb port (1/2) to a 10gb port (1/8) what is the quickest way to do this. Is there a bulk move or clone interface option within the GUI?

Model PA-5220

Software Version 10.1.14-h10

Not using Panorama. Have just

Problem with dynamic update Failed to download file

Hi,

I have a problem with dynamic updates. I see new content version or antivirus, but I cannot download it with message Failed to download file.

Ping to updates.paloaltonetworks.com and downloads.paloaltonetworks.com is working.Service route is Us

TACACS authentication with Cisco ISE not working

Hello, I would like to ask currently I have two firewall that needs to be configure TACACS. One of the firewall is working fine and I'm able to login using my credentials from ISE. However, another firewall is not working for the TACACS authenticatio

HA Failover Issue on PA-3420 with AE LACP – Both Nodes Active (Split Brain ?)

We’re experiencing a critical issue with our HA setup on a pair of Palo Alto PA‑3420 firewalls running PAN‑OS 11.1.6‑h3 in Active‑Passive mode (HA Group 25, preemptive disabled). Both firewalls simultaneously believed they were active, causing a comp