General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

Resolved! PA HA with Port-Channel towards inside/trust connection

Hi,

We need to add secondary PA-220 to existing (production) standalone PA-220 and make it has Active/Standby. Trust interface on PA will be trunk with two sub-interfaces. Both the PA trust interfaces are going to connect downstream Core switch. Core

...

Resolved! Export GlobalProtect MSI file

Is there a way to export a deactivated GlobalProtect client MSI installer from the firewall or download a version from the support website? A client also has a palo alto firewall, but is on a different client version than what I use internally. The

...

Resolved! Log export error

Hello All,

I am facing issue to export traffic logs from the firewall in CSV format. getting the error "no jobs query found".

Troubleshooting:-

* Increased the CSV row number up to 1048576.

* I can export URL filtering logs, security policy, NAT policy

...

HA sync option not showing in Panorama--Template Sttack Sync not seen on Active FW

Hi Team,

I import the configurations from managed device to panorama then export to managed devices of our A/P firewalls. everything went well. but when I see the summary on panorama passive device template showing as in sync but active device templa

...

VSYS Migartion Query From DC5220 to ISP 5050

Spoiler

Hi Team,

I have below network Architecture

Upstream Internet Firewalls PA 5050 Active/Standby

Downstream Datacenter Deployment 5220 Active/Standby

Now We have 2 VYS in DC 1 is Normal 2nd DMZ Vsys.

Now i have to remove DMZ vsys to ISP can some guide

...

CLI/API command to verify Panorama push diff

Do you know of a CLI command or a rest API call to push and to show the changes of configuration to be pushed to a firewall from Panorama? I am trying to automate the process, but could not find any references.

Resolved! MDM Integration Service Cannot Be Started

I'm getting the following start error message on Windows Server 2019 running ID-Agent.

The MADebug file shows the following as well.

------------MDM Service is being started------------
11/10/20 15:52:06:552[ Info 1414]: Os version is 6.2.0.
11/10/20

...

Resolved! Route path monitoring and tunnel monitoring together?

I'm switching to route path monitoring for VPN backup failover and would like to keep my tunnel monitoring active for down/up tunnel email notifications. I can set the tunnel monitoring to wait to recover. Can I use both of these at the same time a

...

Resolved! Aggregate vs Zone protection profiles

We have separate zone protection profiles for each zone. And the definition of aggregate says that "all thresholds apply to the entire group of devices specified in a DoS Protection policy rule". So if we are trying to protect servers in DMZ, unless

...

Panorama Version 10.0.1 Cant see Traffic logs from Palo-Alto Device

Hi Guys,

Devices:

1. Panorama Version 10.0.1 Model VMware ESXi

2. Palo Alto Cluster Active/Passive Version: 10.0.1 Model: VMware ESXi VM License: VM-100

Problem:

Logs that send from Palo alto to panorama cant be seen under the monitor Traffic tab and can

...

Temporary disable Miner / Malwaredomainlist offline

Hello!

Does anybody know how to temporary disabel a miner without deleting it from config ?

Problem is, that currently www.malwaredomainlist.com gets resolved to 127.0.0.1 and the miner alerts in the log files with

basepoller._poll ERROR: Excepti

...

HA sync option not showing in Panorama

Hi Team,

I import the configurations from managed device to panorama then export to managed devices of our A/P firewalls. everything went well. but when I see the summary on panorama passive device template showing as in sync but active device templa

...

Parameters of stdlib.aggregatorIPv4GenericWithList and stdlib.feed

Hello!

Can anyone explain the usage and funktions of the following parameters ?

.) 'store_value' in the stdlib.feedXXXWithValue prototypes.

.) 'enable_list_merge' in the stdlib.aggregatorIPv4GenericWithList prototype.

Thanks for your help

Resolved! Managing Windows Services

Ok, so this may be a stupid question, but I have a server that has a web service running under a domain\webservice account. I want to define a security policy for the service, but the firewall does not consistently get the correct user. After a reb

...

Pre-Logon Issue

Hi Team,

I have configure the Pre-Logon but it's not working

(T5208) 10/26/20 14:04:11:874 Debug(9110): SSO password is empty
(T5208) 10/26/20 14:04:11:874 Debug(2462): m_preUsername pre-logon
(T5208) 10/26/20 14:04:11:874 Debug(9070): Password is emp

...

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

How and Why to Accept a Solution to Your Post