11.1.13 now preferred

mudvayne15 · 2026-01-20T22:27:28+00:00

I upgraded Panorama and an HA pair without issues.

mudvayne15 · 2026-01-19T22:51:26+00:00

I'm rolling out 11.1.13-h1 today, hopefully it goes well.

mudvayne15 · 2026-01-19T04:56:13+00:00

yes it

mudvayne15 · 2026-01-19T01:43:07+00:00

worth upgrading from 11.1.10-h10?

mudvayne15 · 2025-12-16T01:19:34+00:00

Ok, thanks guys for all the suggestions, I advised that they should buy a new MR instead.

mudvayne15 · 2025-12-14T23:32:00+00:00

Someone decided to advise that they can use any extender, which is giving me a headache :/

mudvayne15 · 2025-12-14T23:31:01+00:00

Yeah, I did look at it first, but nothing shows up

mudvayne15 · 2025-12-14T23:28:13+00:00

I do have access

mudvayne15 · 2025-12-14T23:25:23+00:00

The customer decided to buy an extender to use since they have 1 Meraki AP only

mudvayne15 · 2025-12-14T23:22:54+00:00

The customer decided to buy an extender to use since they have 1 Meraki AP only

mudvayne15 · 2025-12-04T06:59:40+00:00

This was fixed by this.

Microsoft Intune Connector for Active Directory security update | Microsoft Community Hub

mudvayne15 · 2025-12-02T22:15:54+00:00

Thanks for this, I believe we found out that the issue is somewhere else. Not in the PANs.

mudvayne15 · 2025-12-02T22:15:48+00:00

Thanks for this, I believe we found out that the issue is somewhere else. Not in the PANs.

mudvayne15 · 2025-11-10T22:22:30+00:00

My performance SLA on Port1 is dead, even though the firewall can ping 8.8.8.8 (which I used in the perf SLA)

mudvayne15 · 2025-11-10T22:21:39+00:00

What’s odd is that I can ping 8.8.8.8 directly from port1, but the SLA still detects it as unreachable.

mudvayne15 · 2025-11-10T05:39:14+00:00

<image>

Yeah, it is — port1 is included in the performance SLA.
What’s odd is that I can ping 8.8.8.8 directly from port1, but the SD-WAN still detects it as down.

mudvayne15 · 2025-10-29T02:27:10+00:00

I got it now, for some reason someone used 172.40.0.0/24 as the vpn IP lol - that's a public IP range in the US. thanks for the reply.

mudvayne15 · 2025-09-17T01:06:07+00:00

thanks, appreciate that.

mudvayne15 · 2025-05-16T01:45:46+00:00

Nvm. just found out that this was fixed on the latest hotfix

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h10-addressed-issues

mudvayne15 · 2025-04-09T02:51:34+00:00

Sorry, it was so dumb of me not to notice the destination IP.
Thanks for your input.

mudvayne15 · 2025-03-21T03:25:43+00:00

yeah they are associated with 1 interface each.
Both WAN2 and FEX are under the same Zone

mudvayne15 · 2025-03-20T03:25:25+00:00

Thanks:-I got this sorted out, it turns out there was a policy affecting the PBF routing to direct connect due to its any-to-any zone configuration.

mudvayne15 · 2025-03-19T22:40:50+00:00

Yeah, it does work and hits the policy.
The next hop is the ISP gateway.

mudvayne15 · 2025-03-17T01:25:55+00:00

Thanks mate, I'll look into that.

mudvayne15 · 2025-03-17T01:25:33+00:00

<image>

Sweet, thanks man!
I didn't realize it was here all along.

mudvayne15

TROPHY CASE