We have DNS sinkhole enabled, but there's a a domain name that is on the sinkhole list that we want to access.
Is there a way to whitelist the one domain name that's in the list?
Frank
Hi
We have 4 PA-450 that are new out of the box and we need to upgrade the software on them to a newer realease. When i login to the support portal and look under Updates i dont find anything related to PA-450 under the content type to select from?
...
Hi Community, my first post so hopefully I am in the right area.
I am running a multi-vsys setup with 5220's in Active-Active HA and using XMLAPI calls from Aruba ClearPass to send login/logout info as well as tags for use in dynamic object groups. It
...
Hi everyone,
I was looking for PA best practices for VM series' zone protection but only found documents that talked about physical PA.
1. Are physical and VM series zone protection the same? could you point me where the docs for these are?
2. U
...
Physical Appliance require a direct internet access or dirty link ?
I'm trying to download the PAN-OS 3020 software from the support portal but cant find in the list and Panorama M-100 as well . Please anyone help why it so ?
Here is a simple example on what I am basically trying to do.
We have two rules that allow access to certain domains.
Rule 1 : Allow access to domainX.com
Source: LAN
Destination: IP-Group
Security Profile: URL Filtering (Base-URL-Filtering-Profi
...
Today we use "ssl" AppID in firewall rules. In case we would enable SSL decryption, is it needed to add the AppIDs of the decrypted traffic to the firewall rules, e.g. web-browsing, java, flash, or is the AppID staying "ssl" even when traffic is decr
...
We have configured a DUO Proxy server for PA firewall MFA and it works. We also configured the second DUO proxy server for redundancy. However, we don't know how to configure PA firewall to failover to the second DUO in a case the primary DUO proxy s
...
Anyone had luck running 10.0.4 vm eval on vmware workstation?
It shuts down right after initial startup, before I get a chance to login in console.
There's more than enough CPU/RAM/Storage. Network Adapters are configured properly.
10.0.0 vm works fi
...
Hi Team,
We have a PA-850 firewall and the swap memory showing 100% utilized.
Can someone help me to resolve this issue.
Hi everyone,
I configured a PA440 as a DHCPv6 Client and a Fritzbox 3390 as the DHCPv6 Server (with IA_PD & IA_NA).
I also configured an inherited interface.
The configuration is the same as here: https://docs.paloaltonetworks.com/pan-os/11-0/pan-o
...
Hello all,
When the SSL Decryption Session is full, the customer asks how the non-decryption traffic is handled.
We need information about whether the lack of resources is causing random drops or not being affected.
The current model is VM-700, VM-3
Hi Team,
We are facing issue with the firewall policy is not working,
we have a backup server(Acronics) that we neeet to allow communicaion between agent and server
we have create a access policy for the communication but once we remove the co
...
Geeting message "Your membership has expired or has not been approved, please contact Palo Alto Networks Support." while trying to raise Case in palo alto network portal.
Raido_Rattameis
OtakarKlier
on:
Unable to ping website, getting this site can't be reached
BPry
on:
PCNSE certification, how to get an online training fully covering all the possible questions
reaper
on:
What does ch mean in PA-VM-OS Software?
