Can't ping a PaloAlto interface

I am new to Palo Alto firewall. I have loaded Pan-OS 9 on eve-ng and connected one of it's port to router. It is layer three connectivity and have assigned ip to both ends. However I can't ping the firewall interface. OSPF neighborship is also not fo

Tunnel Monitoring , is there any option to failback to the primary tunnel?

Hello Team

When setting up a tunnel monitor 

1)  Can we monitor the remote encryption subnets?

2)  Is there a way to failback to the primary tunnel when it recovers ( after failover to the secondary tunnel ) 

Thank you

NGFW                   

Config

How to Start configuration for VPN

Routing question

I might be overlooking something fundamental.

We are trying to slow-step out of another firewall into a PA. I have created an interface on the PA in the old subnet. I can ping across to the server and old firewall.

Clients behind the PA cannot ge

We are not able to receive the password resetting link

We are not able to login the support.paloaltonetworks.com site. When we try to resetting the password using mail id, we did not receive the password reset  link on mail. Kindly help us to resolve this issue

Validation errors in Palo Alto software version 10.1.6-h3

If you found "shared policy & template" are "Not in Sync" with Panorama with the below validation errors.

 Security group 'XXXXXXX' is not a valid reference

 rulebase->xxx-> profile-setting is invalid

URL filtering profile -> is already in use

Th

ISP ping going out via different interface

I am facing a very strange issue. Thee are four ISP connected to PA. All are VLAN interfaces.

While doing a ping to 8.8.8.8 or any public IP from the vlan interface IP it works fine except for one ISP.

For one ISP if a ping a initiated from vlan.7

PA-220 Constantly prompting for password change

After upgrade to 9.1.15 in PA-220 it asks Constantly prompting for password change for only admin account. what is the reason for that?

IPSEC HA SA Sync

Has anyone got this configuration working? Looking for details on how to setup the http forward.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAuZCAW

Static Source nat, two /24 subnets one to one

I want to know if this is possible, make a Static Source NAT so that
source network last octet lets say 192.168.1.10 is translated to 10.1.1.10 then next host 192.168.1.11 is translated to 10.1.1.11 and this should happen always only natting last octe

Regarding REST API feasibility

There is a requirement to check the REST API feasibility for the below parameters. Logs will be sent to Monitoring tool through REST API.

Could anyone please help on this? Can we achieve below parameters through REST API?

1. CPS
2. CPU Utilization Datap

Routing client vpn over site to site tunnel

Hello everyone, I’m new to palo alto and I have the following problematic that I couldn’t solve.

I have PA Firewall in my local site and it’s configured to allow site to site connection to a remote branch which works perfectly. In addition, I’ve set

Need a fast boot time firewall

How fast would a PA-400 boot? I am looking for something that can boot quickly. I currently have a FW that takes about 25minutes to boot (highly doubt that is normal).