Hi
I'm a network engineer being tasked to take over our PA firewalls since the guy who normally handled them is leaving.
Where do I even begin to learn about this stuff? I've never had to work with these before.
Thanks
Hello,
I've been looking a history entries in our threat log and it seems to me that most of the default settings for vulnerabilities - "action" are set to low, for example to "alert" - although they classify the threat as "medium" or "high". For exam
...
Hello
I established an Ipsec tunnel (policy based) between palo Alto and Cisco FW.
phase 1 & phase 2 are up and running but trying to transfer data, fail.
Capture packet (merge recieved and transmit) shown
Source : SYN
Dest : SYN ACK
And then Dest : retr
...
I tried a do-release upgrade on Ubuntu 16.04 LTS and it took me to 18.04 LTS without issue. However minemeld says "Bad gateway" when I try to log into it. I tried to check for updates and figured maybe the source would be changed from xenial-mineme
...
Hi all, in my security policies on a PA-firewall (or in panorama) I want to be able to filter out all the security policies which have no security profile(s) .
I tried a few combinations in the line of (profile-setting/profiles eq 'none') but alas, n
...
Is there anyway to check what zone a subnet belongs in if there are multiple zones on the firewall?
Preferably through the GUI?
I'm looking to directly connect a pair of PA3220 in HA mode to 2 x WAN circuits, one circuit to be Primary, the other circuit as Backup. Both circuits are provided by the same ISP (JANET) and run BGP, we also have the same publically routable subnet
...
Hi all,
Could PA3220 dual power supply input voltage support one from 110V and another from 220V at the same time ? Because of customer plan to migrate power system and will have a transition period about 2~3 min.
Hi I am adding a Application object and got the below error message. Anyone can give a suggestion to resolve it? Thank you
Hello all,
I received from work a MacBook Pro with macOS Big Sur 11.6.2, I've installed the GlobalProtect 5.2.8-23 which is the only one that I had access to, and it seems like whenever I connect the GP, the connection is successful but there is no In
From the command line of a next generation firewall i can use 'ping host blah'. Does the CLI have a command to ping a destination via TCP? Or some other tool to do the same?
Hi All,
I would really appreciate if some one can help me on this.
I am planning to block Torch browser through a firewall rule, using App-ID. But as per information in the community we cannot entirely block the functionality of Torch browser using A
...
How to check which PAN OS is compatible to my virtual hardware or Physical hardware ?
I would like to know minimum hardware requirements for PAN OS versions 9.1,10.0,10.1.
Kindly let me know it for both Virtual and physical Panorama and firewalls
...
Hello everyone,
Before the question, the context.
I have a panorama wich managed a lot of devices groups. we have a lot of rules for them. Which all these rules uses the default profile for log forwarding.
I have a new syslog server and i need to forwa
After reviewing this KB article:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSOCA0
It looks like you can create custom vulnerability signatures for named browsers.
Could you also do that to limit browser access via a
...
reaper
on:
What does ch mean in PA-VM-OS Software?
OtakarKlier
on:
PCNSE Bootcamp
