Hi I have a Firewall currently setup in a Panorama Device Group. I now want to to manage a new Firewall that has a similar set of rules (not a HA) so I want to put it in the same Device Group, so the rules are synced going forward. My question is what happens to the rules on the 2nd Firewall when I add it to the Device Group and push the policy? Does the Device Group Rules (currently from the 1st Firewall import) get merged with the existing rules? Will duplicates get removed? Or will it overwrite the whole config? Many thanks.

We had a client who had their NAT policies targeted to one member of an Active/Passive HA cluster --- for some reason. And we did not notice this until we failed over and the network stopped working. The config showed as in sync between the two peers. I've checked and cannot find documentation that these settings wouldn't sync. Reference: HA Synchronization (paloaltonetworks.com) Am I missing something?

Hi, looking for help. We have a fleet of several hundreds Windows 10/11 devices and we have recently updated Global Protect to v. 6.2.4. About 10% of the devices are unable to connect with the following error message: We have been plagued by this issue even with previous versions and Palo Alto Support was unable to find a resolution in over a year. it is to be noted that the resolutions currently available on the internet (mainly Palo Alto forums) are NOT applicable to our case. Most of the solutions are pointing at a WMI corruption/malfunction, this is not the case with our affected clients: WMI is working properly. Restarting the PANGP servire temporarily resolves the issue, so we provided the users with the ability to restart the service (as mitigation). Is any guideline on how to troubleshoot this? We cannot find any common config/setting for the affected machines, it seems random. Thanks.