We currently use User-ID with an on-premise Active Directory server. We are planning on moving to Azure AD (not to be confused with AD services in Azure). Are there any plan on getting User-ID to work with AzureAD (web Auth)? What other options can
...
Is there a way of getting 7.1 onto an 850? Need to get new firewall into service soon, ideally managed by Panorama. Panorama is on 7.1 and it seems cannot communicate with the 850 as it has shipped with 8.0. Won't be able to get Panorama upgraded in
...
Hi all,
There are any ways can be redirected or forward (use PBF) youtube and facebook traffic to secondary ISP (if we are running with dual ISPs)?
Thanks all!
Are there any plans to incorporate RBAC? There is a use-case for having different teams manage different miners (think manual entries) to a consolidated output node.
My old firewall was able to catch all dns requests from a zone and redirect them to a defined server. I cannot find a way to do that on the Palo Alto. Can it be done?
We are attempting to use a computer based ldap group in the source-user field of a traffic policy on our palo alto 5020.
At the moment that policy is being ignored, and subsequent policies based just on the same source ip group are being acted on.
(if
...
Hello-
... It appears it is not, but I would like clarification. I have rule matches on a dynamic feed, these logs are being properly forwarded and received by the syslog miner, however it is not being matched/displayed within MineMeld.
Thanks!
Hi,
I need to limit the bandwith in untrust interface. We replicate DB info to the Oracle cloud and we want to limit this traffic. We have 100Mbps bandwith, and we want to limit the Oracle cloud traffic 50Mbps max.
So this is what i configured:
Profi
...
Hi Team,
I hope ye are well. Just posting an undocumented limitation on the community. There is a limitation of 30,000 lines of difference on the config preview option before we send a commit through on the firewalls.
After this limit, it advises '
...
hello guys,
Our FW is connecting to ISP lines, and we configured default route with different metric.
The metric of primary link is lower than the secondary link.
For such case, Can I have an automaticlly failover when the primary IPS line is down?
Do
...
With PAN - if I have a client who wants to his a public IP address when their traffic passes through the inside/private interface - what would the NAT look like? E.g. say outside/untrusted IP address is 67.1.1.1 and NATs 1:1 to 10.10.4.5 which is rea
...
Is it possible to tail live traffic in the CLI while running a grep (or match) for specific things? I would find this extremely useful..
Thanks.
Our Minemeld will longer let me log in via the user interface. The operating system logon works fine.
When trying to log into the web interface I get "ERROR CHECKING CREDENTIALS - Bad Gateway"
We are a Windows shop and don't really have any Linu
...
Users complain Global Protect vpn client performance problem. There is shown ping time more than 1000ms after I disconnect then reconnect there is shown less than 150ms. Below photo after and before connection via GP
Hi,
I've just created a new node and I'm seeing events such us: DROP_UPDATE on aggregator type. Does anybody have an idea of what could be the issue?
TomYoung
on:
Can you have an interface with an SFP in receive only mode?
reaper
on:
VM-50 discontinued?
