Next-Generation Firewall Discussions

HA Configurations in Strata Cloud Manager (SCM) with NGFW.

Good Day fellow techies

I am writing this article because I was very confused at the SCM tech writing of the Admin Guide, in regards to HA.

I REALLY tried to follow along with the steps, but could not understand.  I think I am not the only one.

S

The required '11.1.0' base image must be loaded before this image can be loaded

Hi Team,

My Panorama device is currently on Software Version 11.0.5, and I am looking to upgrade to 11.1.4-h1.

In Panorama, I navigate to Panorama > Software, and run 'Check Now' to refresh available updates. I can see that 11.0.0 (base) and 11.0

Palo alto firewall incorrect time

Hi Everyone,

PA-440 appliance running on 11.2.4 firmware

Is anyone experiencing issue in time being incorrect and keeps going back to wrong time and date?

Already tried synching it on NTP server and it shows on CLI that it is synched and reachable howev

failed auth

2025-02-20 16:36:56.159 -0800 debug: pan_auth_cache_user_is_allowed(pan_auth_cache_allowlist_n_grp.c:789): user "jdelossantos" is NOT in allow
list of auth prof/vsys "AD_AUTH/shared" (vsys in request "shared")
2025-02-20 16:36:56.159 -0800 failed auth

Firewall with L2 Interfaces and dual uplinks to switch.

Question on L2 Interfaces and internal VLANs.  We are connecting a 220R with all interfaces in L2.  We have 2 gateway switches so this firewall with have dual uplinks (one to each GW).  How do I apply a VLAN to these interfaces?  Do I even need to?

GW ARP reply..

Preferred version for update

Hi, 

Just looking for advise on suggested upgrade versions

I have two VM-100s running 10.2.8-h3 and a PA-820 running 10.2.8. I need to upgrade them all in response to the CVE below. 

I'm a bit confused as both the Palo Alto preferred versions 1

MS Teams Aplication Performance Issue –Intermittently

Hi Team,

We have received reports from three customers experiencing intermittent performance issues with the MS Teams application, specifically with audio and video not functioning properly.

Troubleshooting Steps Performed (Palo Alto Firewall):

✔ Rem

NGFW 1400 Series LACP / Failover issue (11.1.5)

This is a notification for anyone running 1420 boxes in a high-availability (HA) configuration in their environments >11.1.4. We recently encountered significant issues with our NGFW operating in HA mode. Specifically, the HA setup failed on the acti

How can I block browser extensions (VPN)?

Greetings and happy new year.

I have seen that from my internal network people use VPNs that are installed as extensions in the Google Chrome browser (veepn) to circumvent the URL Filtering of the FW.

Does anyone know how to block these extensions?

I

Failed to Validate Client Certificate" Error with User ID Agent

Hi Community,

We’re encountering an issue with our Windows-based User ID Agent installed on the server. Specifically, we're receiving the error message: "Failed to validate client certificate: No connection found."

Here’s what we’ve tried so far to r

VM-Series Esxi and KVM

Hi guys

I have received a 30-day trial vm series for ESXi and KVM to my official email ID to check its features, we have deployed it in our virtual environment in ESXi and KVM, but it shows an error during the login as shown in the screenshot, I have

Upgrade path from 10.2.3-h14 to 11.1.4-h7

I have a 5410 with current version 10.2.3-14 that is HA and would like to upgrade to 11.1.4-h7.  What is the path and how many reboots?

Are there any cases where certificates are marked as UNKNOWN other than when using CRLs with IDP extension?

Hello everyone,

From the following knowledge, I understand that in CRLs with IDP Extension, certificates not listed in the CRL are marked as UNKNOWN.

PAN-OS Behaviour for CRLs with IDP Extension: Certificate marked Unknown" if not listed in the C