how to setup palo alto for dual stack for IPv6 internet

Hi,

I have configured PAVM in azure with IPv4 and everything is working fine. so I decided to add IPv6 as a Dual stack. And Azure provided me single Public IPv6 and it configures on the Azure load balancer and mapped with an untrust interface on the

GP vpn slow perfomance is AWS N virgina region

Hi 

User reporting Global protect vpn perform slowness even in spilt tunnel while accessing the AWS resource , palo alto vm deployed in AWS us region and all AWS resource are on US region.

AWS keypair failing authentication to PA-VM

AWS ssh publickey failing while connecting to PA-VM, falls back to password authentication which obviously fails. I suspect some of this behavior is due to macos and openssh deprecating ssh-rsa, PAN-OS 9.1.14 offers ssh-rsa which is rejected by defau

Azure multiple public front ends on load balancer

Using multiple front end IPs to split my internet facing applications. Seemed to solve the health probe issue with splitting static 168.63.129.16/32 azure routes between virtual routers, but inbound traffic doesn't seem to know where to go. Single pu

FTP Server behind Palo Alto pair and Azure External Load Balancer Not getting directory

I have a "HA" pair of firewalls in Azure sitting behind an external Load Balancer. I have a FTP server that I have to configure behind the firewalls.  I am able to connect locally to the FTP server and it works as expected, but when I point the FTP c

Azure NAT Rule closing VPN Tunnel

Good Afternoon,

We have a VPN tunnel established b/t an Azure VPN GW and a PA 3020 running 9.1.10.

We need to add a NAT rule on the Azure side.  When we apply the NAT rule, the tunnel closes.

Azure docs on this topic are less than helpful and I have not

VM-300 Inaccessible and Failover Occurred

Hello all, 

Currently, my customer is working on 9.1.12-h3 and they experienced Inaccessible and Failover Occurrences in VM-300.

Therefore, I looked around TSF and found out that failover proceeded after the message pan_hash_init(pan_hash.c:113): nb

Deploying Panorama to Azure gaining initial access.

I am deploying a Panorama VM into Azure. I setup the VM according to the documentation at https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/install-the-panorama-virtual-appliance/insta

Cannot connect VM series firewall to Panorama in AWS

Hello,

We are trying to set up a new deployment in AWS consisting of two firewalls managed by a Panorama server. 

For starters, we deployed one firewall and one Panorama instance. They are in the same VPC, different subnets. Security groups curren

Palo VM-Series

Is it a requirement that the subnets within Azure be named "Trust" and "Untrust" I currently have them named to Inside and outside and wanted to make sure this wouldnt case something to not work/route etc... 

Is there a document related to azure HA Link and path monitoring function support?

According to the Admin guide, there is a phrase that does not support link path monitoring in the case of aws, but the contents of Azure are not mentioned

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/device/device-high-avai

Configure global Protect with AWS VM series firewall which is working with AWS Gateway Load balancer

I have deployed two separate VM series firewalls (without HA) on AWS with AWS gateway load balancer. east west traffics are seams to be fine. But for the global protect VPN configuration with the AWS gateway load balancer not working.  

Are you using certificate profiles for Azure SAML authentication?

Setting up SAML authentication for the first time from a new Azure instance and having multiple issues. I had an idea how it would work, that Azure would provide an internal CA and SAML gateway (IDP) certificate, and then assign us a certificate (w/p

Overlay routing for specific VPC

AWS instance admin admin not working after reset

As per the subject line I had to do a reset on an AWS PA VM and admin admin is not allowing me to access the command line.

The reset was done by the following command:

>request system private-data-reset

Any hints or tips on how I can access the device?