Whether configuring Vsys will make firewall more secure or not

I would like to know advantage and disadvantage of implementing Vsys. 

in an environment , we are able to configure our firewalls with vsys or without vsys. 

Would also like to know whether configuring vsys will make firewall more secure or not ?

Unable to take passive firewall access.

We tried changing the cable, switchport and VLAN and also connected the Management Interface directly to a laptop. There was no SSH or HTTPS access possible

We also tried to restart the Management and Device Server and other related processes on the F

Traffic Distribution methodology

We have 35 PA firewalls all using SD-WAN and have (typically) the following configuration for WAN connections...

100M TC4 Internet

20M TC2 Internet (best quality)

5G Cellular Internet (always on)

We have the following traffic distribution profile

NAT rule

Hello

I have a problem. I have a firewall Palo Alto. Eth1 (20.74.34.3) is configured on public zone and eht1/2 is configured in the internal zone (10.110.0.4). Inside the internal network, I have a dmz subnet 10.111.0.0/24 where I have 2 web server

Having trouble to create an support account?

I am trying to setup an account to create a case.  I have my serial number/Order number, Since one of these are required in the registration process, I  opend a case [Case#: 02362263] . I do have access to my paloalto unit online in case I can find a

PA-VM HA Failover Procedure

hello dear forum members, 

i have a question regarding 

the cluster configuration. 

wer'e currently

running a PA-VM in cluster (A/P Mode) 

in the organization within an 

azure enviornment, both

are configured with different External

ip address. 

PA-820 after factory reset | by default User/Pass not working....

PA-820  experiencing an issue by default User/Pass not working   (admin/admin)  here is the logs listed below

Welcome to the PanOS Bootloader.

U-Boot 8.1.1.0-31 (Build time: Apr 23 2018 - 15:16:48)

Octeon unique ID: 03c00051821df31e00c6
N0.LMC0 Conf

ISP Failover with dual Dynamic Public IPs?

Hello,

I have two ISPs with Dynamic Public IPs.  Is there a way to setup ISP failover?

Thanks,

Bill

PA-5450 MGT-A and MGT-B Management Ports configuration

Based on the PA-5400 MPC Component Descriptions, the MGT-A and MGT-B management ports are bundled by default as a LAG:

"Two SFP/SFP+ management ports providing 1/10GE connectivity that are used to access the management interface. MGT-A and MGT-B ar

v-wire security newbie

we have a v-wire setup where we are controlling traffic to a secondary firewall w our 820. as its sitting between ISP and the site secondary firewall (sonicwall) we created a rule that negates all but some countries we do business with and that negat

Using Captive portal and Azure AD for user network authentication

Is there any documentation available on how to achieve this for general user network access? I assume the network has to be set up with a captive portal, but traffic to identity provider for SAML exchange need to be allowed even before the user gets