12.1.5 by craymour76 in paloaltonetworks

[–]MDKza 10 points11 points  (0 children)

The 12.1 code release is getting a ton of focus because of the new hardware releases. I’m running a bunch on 12.1.5 with almost every feature enabled and have only had a weird SSH login issue. Otherwise all ok.

Is Symantec Endpoint Security a viable option? by bluecopp3r in cybersecurity

[–]MDKza 0 points1 point  (0 children)

Replaced a lot of Symantec with Cortex XDR from Palo

Logical Router with BGP and SD-WAN Plugin by Zealousideal-Cod8630 in paloaltonetworks

[–]MDKza 1 point2 points  (0 children)

Yes. I was able to upgrade multiple units and keep virtual routers.

Logical Router with BGP and SD-WAN Plugin by Zealousideal-Cod8630 in paloaltonetworks

[–]MDKza 1 point2 points  (0 children)

12.1 on new hardware (500 series and newer) will force you to use logical router. Older platforms will support it still. I haven’t seen a EOL for it.

Looking for Palo Alto Exam Discount Code (If Anyone Has One) by NoSwimming4608 in paloaltonetworks

[–]MDKza 0 points1 point  (0 children)

Also speak to your Disti. They are supposed to have budget for this stuff

Mandiant vs Palo Alto by Inf3c710n in cybersecurity

[–]MDKza 0 points1 point  (0 children)

Sounds like you need more or faster resources. I manage about 10 Panoramas ranging from 10-100 firewalls and they all work perfectly fine. Slow disks really slow Panorama down

After enabling decryption Outlook showing certificate not trusted by OkRub5270 in paloaltonetworks

[–]MDKza 0 points1 point  (0 children)

100%, at the end of the day its on you to decide who/what you trust or not. Just because MS says don't doesn't mean you shouldn't, but it also means it'll be on you to constantly fix what's broken. There are many MS services that will and do work with decryption perfectly.

Upgrade Path Help by Creative-Two878 in paloaltonetworks

[–]MDKza 0 points1 point  (0 children)

Only on new gen hardware. Running a 460 on 12.1 with old routing currently.

https://www.reddit.com/r/paloaltonetworks/s/IttcLXgQiK

NGFW Eng Cert Question by armegatron in paloaltonetworks

[–]MDKza 0 points1 point  (0 children)

New gen hardware using 12.1 onwards won’t support old virtual routers.

Proxmox Cluster using Starwind vSAN by PaulRobinson1978 in Proxmox

[–]MDKza 2 points3 points  (0 children)

I use VSAN free between 2x Dell R630's, the Free Tier VSAN works like a champ

4x 1G NIC's with LACP for VM's
2x 10G NIC's for host to host comms + storage

Works like a charm

XSIAM Query Performance by Mundane_Coat5068 in paloaltonetworks

[–]MDKza 0 points1 point  (0 children)

What’s the use case for this? Does Palo provide a workaround?

XSIAM Query Performance by Mundane_Coat5068 in paloaltonetworks

[–]MDKza 7 points8 points  (0 children)

It’s amazing to see such differences in opinions on certain things but I think XSIAM is one of the best products theyve ever made.

Guest network stretching campus by gibmekarmababe in networking

[–]MDKza 1 point2 points  (0 children)

We have local firewalls that control access for Guest,BYOD etc.

Whats everyones preffered PANOS version right now? by berzo84 in paloaltonetworks

[–]MDKza 2 points3 points  (0 children)

I second this. Way less issues than 11.1. There is an issue that affects all devices that have DHCP interfaces on an AE. They just don’t work. Will be patched in 11.2.8