VM-Series in the Private Cloud

Welcome to the VM-Series in the Private Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Palo Alto VM removal

Hello guys,

could anyone guide me through the following process:

1) How do we remove old firewalls from Panorama and from Palo Alto support web site

2) How do we re-authorization of new firewalls in Palo Alto

...

GCP Load balancer showing in Unhealthy state.

Hi Team,

Flow:- On-Prem---->GCP(Interconnect) ---->External-LB---->Palo Alto---->Internal-LB---->GCVE.

This is the flow/architecture we have in our environment. I have observed one thing when we enable both VM instance then LB showing in unhealth

...

Invalid configuration error migrating Panorama from AWS VM to ESXi VM

Hello,

We have an issue migrating Panorama from an AWS VM to an on-premises VM in VMware ESXi.

We have followed the guide for VM migration, exporting the config and importing it into the new VM. We have the same PAN-OS 11.1.6-h3 and plugin versions,

...

Resolved! How to Increase Log Retention by Adding Disk to VM-Series

Hello,

We are currently running 28 Palo Alto VM-Series firewalls, deployed as 14 HA pairs (active/passive). Each firewall is hosted on a virtualized environment with standard disk allocation.

We heavily rely on traffic logs and threat logs for complian

...

VM Interfaces disconnected after ESXi Upgrade to 8.0.3

Hi, after an upgrade of an ESXi box hosting a PaloAlto VM we had issues which in the end forced usto reinstall the instance.

We upgraded a VMware ESXi host from 7.0.3.x to 8.0.3, 24280767 and after the reboot everything seemed fine at first sight.

...

Issue Running PA-VM in VMware Workstation 17.6.3

Hi:

I downloaded the 30 day trial PA-VM and am trying to run it in VMware Workstation 17.6.3. I can get it to install, but shuts down after about 5 minutes. I also tried running the VM in VMware Fusion 11.5.6 with the same results. At this po

...

Resolved! Cannot log in to GUI and CLI after upgrade to 11.1.4-h7

After the upgrade to 11.1.4-h7 from 11.1.2-h3, we cannot log in using our admin credential on the GUI. We are getting error "Invalid username or password" and "Your login session has expired and you have been logged out for security reasons. Please l

...

Resolved! IPsec tunnel doesn't connect - no errors seen

Hi everyone, do you have any idea why this tunnel will not establish?

I'm trying to connect with a partner company. The IPsec config is identical across two templates. Both sites have their own unique public IP and are connecting to the same peer

...

Site-to-Site VPN Fails in AWS

I have setup VPN tunnel on VM-Series Next-Gen Virtual Firewall w/ Advanced Security Subs (PAYG) in AWS with a remote site. I am having issues to establish VPN tunnel, log shows that phase 1 & 2 is loaded. For testing purposes, I have created one poli

...

Resolved! Palo Alto VM-Series Software Firewall Keeps Shutting Down in Ubuntu Desktop 24.04.2 LTS KVM

Subject: Palo Alto VM-Series Software Firewall Keeps Shutting Down in Ubuntu Desktop 24.04.2 LTS KVM Good day from Singapore, I have asked ChatGPT Artificial Intelligence (AI) for assistance in installing and setting up Palo Alto VM-Series Software...

Resolved! PA-VM on ESXi 8.0.2 'interface configured but down'

I'm grateful to the person who wrote this article, and I'm sharing it here so that others don't go crazy like I did.

PA-VM on ESXi 'interface configured but down' - Red9

By default DPDK is enabled on VM-Series firewalls as stated below. If the VM

...

AWS HA IP-Secondary Not Working

Hi

I am having issues with 2 Palo Alto's setup as an HA Pair using IP-Secondary failover, where the Secondary IP Address does not move between the two devices.

I have found the following article which shows the error I am getting in the logs:-

...

Commit Failure Enabling DHCPv6 Prefix Delegation

Hello! I have a Panorama running 11.2.2-h1 managing an A/P HA pair of VM firewalls running 11.1.6-h3. I'm trying to configure the firewalls' interfaces to configured their IPv6 addresses based on a prefix delegated by the ISP on the WAN + a ULA addre

...