I have l3 switch , new vlan is created and its default gateway is PA FW..A machine when connected to trust interface eth1/2 is able to access the internet...but when machines are connected to switch with trust IP range,internet is not working.
My ma
...
I currently have a Brand X firewall at our perimeter with a /24 on the outside and private addressing on the inside.
I want to add a PAN in parallel to the current firewall and gradually move services from Brand X to PAN.
The plan at present is to ta
...
Hi
Anyone run into a issue where Client Certificate does not get presented to GP if its in the Local Machine Store? I tired giving the user perm but this didnt fix it. Only way to resolve it is to move the cert to the user store, which I dont want to
...
Hi community,
I running docker container of Minemeld and populated the indicators from different sources. After that Minemeldcmoved to the Intranet like network which has no internet connection ans after awhile all indicators disappears. When inter
...
Hello Guys,
I am preparing for a PCNSA exam and practicing my labs at NDG portal. It is running version 9.0.1. Except for the File from the lab guide the firewall is not sending any other files to Wildfire for analysis. Is their some other things i s
...
Hi guys
Is there a way to configure a HA of Minemeld servers ?, I was thinking in configure duplicate EDLs each one pointing to different servers, but I'm not sure if it could overcome addresses limit.
thanks!!
Twitter is not working. I create the simple policy but I got this error. aslo create the application override but still I got same error i have also change my browser but still same please suggest.
I am having difficulty getting an output feed setup for URL block list processing. I have an input feed that is set up as a CIFv3 miner and it's showing over 49,997 indicators that are processed and it appears to be working fine. I have a process u
...
hello community,
I have a question that I have not been able to solve with the study material and it keeps breaking my head.
Here it goes, when I generate an application-based security policy, for example from "trust" 10.xxx to "untrust" any
with app a
I have configured trust and untrust zone with respect to their interface.
I create policy of any any...my firewall internet only work when i configure service route and destination as outgoing interface,if i set it as default and select use managemen
...
Hi, I'm in the process of working on my Palo certification and saw that I could request an exam voucher on https://live.paloaltonetworks.com/t5/second-watch-articles/step-10-request-exam-voucher/ta-p/304454 but I have received no response from the f
...
Hello,
Logs should only be placed in the active node, however i am keep monitoring the globalprotect logs for 3 days and i am sure that the active node does not change, however the logs is still appears on both nodes each with different time.
Did som
...
Hi all,
I'm using PaloAlto's API for the first time.
My idea is the following:
- for each rule, I would like to apply a security profile based on the service setted.
Reading some docs online i wrote this pseudocode.
HOSTNAME = '192.168.55.10' API_KE...
I created a custom ACC tab with some filtered widgets and need to share it with some other users to monitor the network over the weekend. The users are not proficient with panorama, I basically want them to watch the tab I have created and call if X
...
I have multiple miners which collect over a million indicators; however for the output feed I always displays indicator number as 999,999 which is then causing an overflow of domains.
Is it possible to increase or remove this limit for the output fee
...
reaper
on:
What does ch mean in PA-VM-OS Software?
OtakarKlier
on:
PCNSE Bootcamp
