Hi, hoping someone can guide me. I am trying to see if it's possible to have, basically, 2 VPN's on the same firewall. One portal/gateway would be for employees using radius/AD/DUO authentication and the new one would be for consultants. Same authentication methods although the consultants would be in a different AD group for auth/DUO. Basically...
I was asked to assist with a new wildcard certificate that was uploaded to the firewall yesterday, update the SSL/TLS Service Profile and confirmed settings for GP. Commit failed so began reviewing configuration. The 2 reasons listed for the failure were: client useridd phase 1 failureclient gp_broker phase 1 failure Double checking and the...
Not sure what happened but it seems that all my firewalls stop sending logs to panorama (local log collector). I have a ticket open with PAN support but not really getting anywhere. Recently upgraded PANORAMA to 11.1.13-h3 and added additional collector disks to PANORAMA. Also forwarded logs from PANORAMA log collector to our syslog serv...
File Hash: 848D9970F9997736A2744EEC18F2B0D6CFDC6038031AC19938EDB208DA758828. VirusTotal: https://www.virustotal.com/gui/file/848d9970f9997736a2744eec18f2b0d6cfdc6038031ac19938edb208da758828. Current verdict: generic.ml. Run_Hades2.exe is the launcher for 7Launcher - Hades II. It downloads, verifies, updates and starts the game files at the user'...
Hi Has anyone else come across this? I keep seeing CPU spikes on production web servers running v9.3 and 9.3 that has an impact on the end users. They come in roughly 45 minute bursts and running procmon indicates the cyserver.exe is causing them. One suggestion ive had is to clear the content cache in the possibility that a bad update is tryi...
Hi, is there a way for XDR to create an AI whitelist so that only access to permitted AI executables is allowed and everything else automatically blocked?
Hi Team, Recently we performed VM-Series NGFW PAN-OS upgrade from 11.2.7-h13 to 11.2.13 (which is deployed on GCP). Before upgrade ingress & egress traffic was working fine, post upgrade we faced issue with ingress traffic. For this issue we raise TAC ticket, we didn't not received any conclusive resolution. After reverting back to 11.2....
Hello, We are using globalprotect for users to connect to our network, but recently we have another set of users that we would like to put them on a separate network. We created another profile on the Gateway specifying that if certain users, we have connection with SAML, should receive the IP address of the secondary subnet. We moved this p...
Is there away to aquire and export of the BPA checks to a csv file for use manually?
文件雜湊值：72059614bbd7cfc569c264ba72019c58647b124dfc9bdb5e6646c13cf218079f Virustotal報告連結：https://www.virustotal.com/gui/file/72059614bbd7cfc569c264ba72019c58647b124dfc9bdb5e6646c13cf218079f?nocache=1 Virustotal目前判定結果：Generic.ml
Model: Panorama VM Version 11.1.13-h5Kindly advise, Panorama SD-WAN Plugin shows no data, even though the device traffic logs already forwarded to Panorama it has exactly same issue with this document:: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sZtYCAU we have verify 1. Traffic log forward to panorama succes...
Hello, Does anyone know when the Gen2 Panorama image will support Azure v6/v7 instance types?
When setting the password complexity on the Palo Alto firewall, I set only the expiration date to 60 days and locked the account. Is there a way to keep or leave related logs in the system log before the expiration date? If there is any content, please also provide a link to a site where I can refer to it.
Hello, How do I set up a custom alert in IoT Security to detect specific device vendors? I have several MAC vendor/OUI codes and want an alert whenever a device matching one of them connects to our network.
Currently, PowerShell activity generated by an AI Agent is being detected by Cortex XDR. After investigation, we confirmed that this activity is a false positive, as the AI Agent uses PowerShell for administrative/management purposes. Due to our internal operational policy, we cannot use Legacy Exceptions, so we are considering using Exclusion R...
