Standby firewall restarting on 11.0.4-h1

Upgraded my 5250 firewall pair last week to 11.0.4-h1 for CVE-2024-3400.  Since then, have seen my secondary/standby firewall reboot twice over the course of a week after a error of "HA Group 52: Dataplane is down: too many children exited".  This ne

NAT configuration

Hello

I would like to have your support to help me for NAT configuration for both scenario

Scenario1

Our customer request to create an IPsec tunnel between us (mycompany) and Customer. Our users need to reach Web server hosted on Customer site vi

Amber LED on PA3220

Hi All,

I am getting amber LED on the firewall PA3220. 

Observed alarm is active for Temperatur : Qumran Switch Core. Can anyone know what is causing this issue and how to resolve. all other alarms are False only this alarm is true.

show system e

Help me to fix this issues /possible solution

 I am going to configure  Palo alto 5250 firewall to   branch   Huawei router  

The device is not physically connected ,  i try to  do static route from Palo alto to  Huawei router router but the network is not reachable.

kindly support me how to f

Should we block HTTP range requests?

I have found a few short discussions about how to block range requests, and an article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJsCAK.

My question is whether we should be blocking them because they present a thre

Error Encountered Bringing Up PaloAlto VM in ESXi (6.5)

PANOS 10.2.8 NOT recommended: S2S VPN IKEv1, IKEv2 Prefered does not work anymore

Hi Everybody,

We updated from 10.2.7 to 10.2.8 and had a lot of troubles with our Site-2-Site IKEv1, IKEv2 Prefered gateway connections. I'm not sure if the IKE Version is the root problem, but that was the pattern that was visible in the short tim

DDoS Profiles

How does one go about getting the realistic values for your environment to plug into the DDoS profile or even the zone protection profile? How do you see how many SYNs you are getting per second/min etc?

FW Outbound policy

Hi

What is the best practice policy outbound from the FW itself (i.e management )?

Allow any out? *.palotalto.com?

Need to allow dropbox sharable url and rest of everything block

Hello ,

we got one request from user that he required only access sepcific sharable url only and rest of dropbox traffic blocked . Please help with this, as user have some pdf which need to download with dropbox specific url (that dropbox url share

Failsafe bootloader

Hi Team,

Please assist with the following error I am receiving after firmware upgrade on my pa-850 firewall,

No-LMC0 configuration, and the device keeps rebooting.

Thanks in advance.

Is it possible to upgrade PAN OS- 11.0.2-h2 to 11.1.2-h3

Is it possible to directly upgrade PAN OS- 11.0.2-h2 to 11.1.2-h3

why drop rst packet

The customer is capturing packets on the firewall.

Check the files in the receive stage and find that the firewall has dropped the rst message sent by the client in the session.

Please refer to the screenshot for the file reference. Can someone tell