I recently experienced a situation where an attempted push of firewall configuration was failing for a single production HA firewall. The error being received when attempting the push was the following: The validation error can be fixed by simply performing
Advertising a non-existent route to BGP in PAN-OS
Introduction Normally if you want to advertise a non existent route in the Cisco world, you’d need to create a null route to make that happen. I stumbled across the following post though when I was trying to suss out
Palo Alto Useful Links and Commands
I’m forever needing docs for Palo Alto considering that is now my weapon of choice in the fight against bad actors. The problem is that it can sometimes take me an age to find some of those useful docs that
Firewall Vendor Transitioning
Introduction This is quite a complex topic and can still be a tricky one to get right but I have developed a proven methodology that can be used very successfully.I have now used this methodology multiple times to transition from
OSPFv3 Authentication Palo Alto to Cisco Router
Introduction OSPFv3 authentication is quite generally quite straightforward to configure between two Cisco devices. There are some great posts regarding this topic, in fact one of the best I’ve read is by the great Jeremy Stretch. http://packetlife.net/blog/2008/sep/3/ospfv3-authentication/ The issue I
Palo Alto Dual WAN branch office to Netscreen HQ
Introduction The deployment of dual WAN firewall solutions in branch offices is often required to ensure fail-over for unreliable WAN connections. This type of deployment however can add additional complexity compared to a full BGP setup using capable routers. With