topic Re: not able to disable packet-capture for DNS security from panorama 10 to firewall 9.1 in Panorama Discussions

not able to disable packet-capture for DNS security from panorama 10 to firewall 9.1

Deepak25 — Wed, 07 Jul 2021 04:31:23 GMT

Panorama is running on 10.0.5 and Firewalls running on 9.1.7

We want to disable packet-capture for DNS security license from Panorama , but there is no option in Panorama for DNS security as multiple categories replaced this option in 10.0

Panorama 10.0.5

Firewall 9.1.7

can we disable pcap for all new categories showing in DNS-Security in Panorama and push the changes ? Will it work ?

We want to disable pcap for palo alto networks DNS security signature showing in firewall.

Re: not able to disable packet-capture for DNS security from panorama 10 to firewall 9.1

NikolayDimitrov — Wed, 07 Jul 2021 07:06:57 GMT

Why it shouldn't work? You just disable the "single-packet" capture for the categories on the correct profile under the correct device group in Panorama and commit and push the config to the firewalls:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/objects/objects-security-profiles-anti-spyware-profile.html

Re: not able to disable packet-capture for DNS security from panorama 10 to firewall 9.1

NikolayDimitrov — Wed, 07 Jul 2021 09:36:55 GMT

You may also check the free trainning for Panorama edu-120 (free registration to Palo Alto beacon is needed https://beacon.paloaltonetworks.com/student/catalog