How do I assign SD-wan interface profile to template when all sites have different speeds for fiber and cable.

How do I assign a SD-wan interface profile an interface in a template with 3 firewalls assigned to 3 groups based on site when each site has different speeds for each ISP? Do I have to go against palo alto recommendations and use 3 templates?

Site 1

Export details of Global Protect Client users running below version less than < 5.2.12

Hi All,

Is there any way to export the reports from Panorama automatically for the scheduled time from Panorama whose Global protect version is less than 5.2.2

Data Redistribution Agent - system log message

Hi,
In our Panorama system log I see a lot of logs giving the output shown below:

Event: connect-agent-failure )
Description: 'Redistribution Agent "data redistribution agent id"(vsys1): details: close connection to agent'

I see this messages are comin

what is elastic+ management plane cpu process?

Can anyone explain why elastic+ is showing in show system resources command?

17162 elastic+  20   0 3923.0g  38.0g   3.3g S   5.9 15.1 168339:53 java

18242 elastic+  20   0 3921.6g  38.0g   3.3g S   5.9 15.1 163177:55 java

top - 19:19:39 up 104 d

unable to connect to Panorama error "TSL-SESSION-DISCONNECTED"

Hi Team,

I am unable to add my gateway to Panorama, It is showing system logs TSL-SESSION-DISCONNECTED in panorama,

It is connecting and disconnecting every minute. When I supply command show devices in panorama, The predefined certificates not

The Panorama IP has been changed on the firewall, but the firewall still has a session to the original IP

Panorama is used for management and log collection. The IP address of Panorama has not changed. There is a firewall outside Panorama, which maps the 3978 port of the firewall's exit IP to Panorama. The managed firewall was originally configured with

Dynamic Address Group values in Panorama

Is there a way to have the values from a dynamic address group show in Panorama if its placed in the group on a firewall itself? I was looking for a central place where a device can manually be removed from the group if needed and redistributed to al

URL download blocked and unable to remove block for user to access the download.

How do I get a URL download unblocked that is not on the block policy in Panorama, found to be low risk in test a site, and found to be benign when analyzed by wildfire.

Primary palo alto 220 missing on panorama but I can access it via CLI

Needing your help I'm newbie on Palo alto . We have a Panorama on one of our sites this is PA 200 before I'm seeing the primary on panorama but not its not. Although I can access it via SSH and use the CLI but when I run the show running sync-to-pano

Terraform Panorama Nat Policy group panos_nat_rule_group on panorama is not working - Terraform version = "1.11.1"

Hi Team ,

We are testing the panos_nat_rule_group on panorama using terraform and somehow it is not working

1) Below is the official terraform documentation for Panorama Nat Policy group
https://registry.terraform.io/providers/migara/pan-os/latest/doc

Template stack override clear pending change

I mistakenly clicked an override on a template stack and now there are pending changes to be pushed to the firewalls.  I tried the revert option in Panorama next to the commit button but it did not show any changes.

I tried the Revert to running Pa

HIP Notification + Windows Updates

I have HIP notifications set up when users do not have Microsoft patches greater than or equal 2 severity. I would like to only notify them if it is a Windows Update, specifically security updates. As of now, they are getting the notification for any