Hello all,
Looking for more information on these two applications if anyone can assist. We're deploying firewalls as an MSSP and some of the traffic we're seeing hit application-based policies doesn't seem to make sense. Some of the examples we've se
...
I need to secure access to Azure AD. The IP address range is available in the following JSON
https://www.microsoft.com/en-us/download/details.aspx?id=56519
How do I go about turning this into an EDL? The JSON file that Microsoft provides contains m
...
when in process of upgrading OS for pa-500 active/passive pair, on the passive devic i upgraded from 7.115 -- 8.0.0(download)-->8.0.20(install) -->8.1.0(download) -->8.1.12(install)
now passive device is 2 major os version ahed , looking for ideas ho
...
Hi All,
I already have two firewalls to set HA and use Active / Passive mode.
But when I put both devices into the same Device Groups and Templates and push the configuration file to both devices, the HA settings of the second device will be overwritte
I have an employee who travels often with a need to simultaneously connect to two Global Protect VPNs, neither of which are clientless VPNs.
The first connection is to the main office.
The second connection is to another company, which has whitelisted
...
Hello everyone,
I want to make redundancy ssl vpn for two ISP.I have two ISP.I will use DNS failover.And write nat rule for two publıc to loopback interface.(I use loopback interface for globalprotect).I write symmetric return for two external interf
...
Hi All,
Is it possible to use a Multi-VSYS Palo Alto to have the active-primary on one Palo Alto and a second VSYS Active-Primary on the second Palo Alto in Active-Active HA mode. I've done this on Cisco Active-Active firewalls but I need to do this
...
Anyone else notice that the Palo Alto URL filtering test pages (example: http://urlfiltering.paloaltonetworks.com/test-command-and-control) are no longer reachable using http?
This article describes the pages and why you would want to use them to val
...
Hi,
It's possible to use well-known communities in Palo Alto like in Cisco Router? I mean, community no-export, no-advertise, local-as or Internet.
We need to propagate some routes to a peer but indicate to that peer that don't propagate outside the
...
Hi Team,
I am trying to achieve my requirement however, unable to achieve it. Please review my requirement below and suggest your thoughts if there are any possible way to accomplish.
I want to block SSH traffic and at the same time i need to allow S
...
Hello community - I have a case open with support, but I am looking to see if anyone else has an idea for me while they are looking at my tech support files.
I attempted to upgrade an active/passive HA pair following the Palo Alto Doc. I upgraded the
...
Hello,
We have a few firewall clusters managed by Panorama and are looking to change the naming schema for templates and template stacks. Does anyone know if changing these would have any affect on firewall operations? We previously changed the zone
...
Hi,
We have a case that 1 user would like to access URL (example a.com) that is currently blocked in existing URL filtering profile.
We know we can allow this by
1. clone existing URL profile and add a.com into allow list or add it through custom URL
...
We are finding that even domains configured as malware/c2 are not getting sinkholed. I'm aware from other posts, that these are not the same database on the firewall.
Why are these not persistent? Why would you not flag on a DNS lookup that is
...
Hello
In one of my subnets I'm using google 8.8.8.8 as DNS server (received via DHCP).
But only form one entry I want to provide my own FQDN and IP.
Could I use DNS proxy feature for this ? (enable DNS proxy with primary DNS server 8.8.8.8 and add stati
...
reaper
on:
What does ch mean in PA-VM-OS Software?
OtakarKlier
on:
PCNSE Bootcamp
| Subject | Likes |
|---|---|
| 5 Likes | |
| 3 Likes | |
| 3 Likes | |
| 3 Likes | |
| 3 Likes |
| User | Likes Count |
|---|---|
| 10 | |
| 7 | |
| 6 | |
| 5 | |
| 5 |
