BGP session flapping with error code 3 subcode 11

Hi All,

I have an issue with setting up a BGP Establish connection. On my side is a PA firewall connected to the a ISP with BGP session. The first time, the ISP side sent only the default route to PA, and there was no problem in the BGP session. An

Telemetry decided to stop sending

I have seen a couple others post this same issue on Reddit but figured this would be the place to ask. Does anyone know how to kick telemetry back into a working state? It was working and then last month on the 25th was the last time it sent. no erro

loopback for globalprotect VPN

What is the advantage of using a loopback interface for a global protect VPN?

Dynamic content update error-Panorama

Hi Team

Iam getting an error while chcek in to the dynamic content update in my panorama.

Error message is as this 'Failed to check WF-Private content upgrade info due to unsupported protocol.Please check network connectivity and try again'

Iam

Expedition not importing NAT or security policies from PA-3020s running PAN-OS 9.1

I'm working on a project to upgrade 2 x PA-3020s each with their own configuration into an HA pair of PA-1420s and am having trouble with Expedition. I've tried importing the devices using the API key and also by exporting the running-config.xml file

Sofware Upgrade broken? "An active license is required for this feature"

I have a bunch of PA440s and some of them cannot be upgraded as I keep getting an "An active license is required for this feature" message when clicking on Check Now under Device > Software. Device is correctly licensed and activated on the support p

Enable global setting preserve-prenat-feature for prenat user-id

Hi. I have GP and userid configured at Pan OS 11.1. I'm getting the message.

• Warnings:
• . vsys1
• . Warning: please enable global setting preserve-prenat-feature for prenat user-id to be effective.

I can not find anywhere in menu the mentioned global se

Log forwarding - Filtering and Auto- tag not working

Hi there,

I had setup Log forwarding profile, where I am sending All logs to syslog server. Thats working great.

Then I added one more line where I am filtering threat logs for (severity eq critical) and (zone.src eq internet_zone)

Checking f

Error trying to assing more than 90% to Detailed Firewall Logs at Collector Group in Panorama

Hi all,

We are using a Panorama VM with a local managed collector. When I try to customize how to use the assigned space, Collector Group -> General -> Log Storage and I introduce more than 90% for detailed firewall logs, red square indicates that

GPVPN keep disconnecting after installing Windows Update kb5037771 (Window 11)

Greeting all,

I recently experience GP VPN disconnecting after installing Windows Update kb5037771 for win11 laptop where it totally cannot sign-in at all.

Kindly advise is this something can be done on firewall level or on client machine to fix

Unable to reach management service and console

Hi, greeting all

my palo alto appliance(PA-850) used virtual-wire mode already, a few days before, paloalto can passaging traffic by virtual-wire pair, but the management service unreachable. even i tried to PING / HTTPS / SSH / SNMP / Console etc. a

Running SSH commands

We have a used Palo alto PA-3050 and with a support of someone in this community have configured the management IP address and default gateway. We have used the web interface to configure DNS.

The device is running PANOS 9.1.15-h1 and we understand t

COMMIT FAILED

Hi everyone,

When I commit on my device, I get the following error "virus_update_block"

Has anyone had this error before or can anyone help me resolve it?

Thanks.