Hi
I am looking for a design/ best practice recommendation for the following topology (See cover photo)
I am looking at implementing BGP between the swtiches (Nexus 9Ks) and the firewalls (PA 3250's) Firewalls are in a HA pair. Switches use VPC's as
...
1. Panorama from legacy mode version 8.1.14-h2 to panorama mode 9.1.10 can push config to PA-5020/5050 version 7.1.12?
2. I created my VM panorama. it was going to pending loop:
Warning: This Panorama instance does not have a license key. Click 'OK' b
...
Every single security policy is using the same anti-virus and anti-spyware profile, but the zone heat map is showing 0% DNS Sinkhole adoption for some rules.
There are three Source/Destination Zone pairs where it is showing 0% URL Filtering (because
...
I work for a global enterprise that has around a dozen PA 7000 series FWs running between 2 & 6 vSystems each. We have many address groups with more than 500 members, and several "SuperGroups," containing two, or more, of those large groups.
Let's sa
...
Hi all,
Apologies if this is in the wrong location, I'm new to PA and the community.
I'm looking to upgrade Panorama and the associated firewalls it's managing from 9.1.5 to 10.0.6.
From what I've gathered, we'll need to follow the recommended upgrad
...
I am trying to figure out why me zone protection adoption rate is 96%
The Zone Adoption Heat Map shows 0% adoption for Any to Any and Any to Untrust
How do I resolve these issues?
Hi All,
I have set all my zones with zone protection but after running BPA the zone protection adoption result is 90%, i have tested same on other firewall and get 97%, what i'm missing, Is it possible to get 100%?
Online manual says: (https://docs.p
...
Panorama is on 10.0.5 and firewall is on 9.1.7. Yesterday we have performed BPA for firewall , adoption rate is showing 0% for DNS security.
We have upgraded panorama to 10.0.5 after 12th May , before that adoption rate for same was 100%.
we want to co
Hi All
We are planning to deploy office 365 in our environment and as a beginner i want to know what are the best practice deployment for office 365. if anyone has done it in the past, i will really appreciate if you can share the process and procedur
...
Looking for software that can report if one object in a rule is unused.
example: I have 3 destination IP's in one rule, but one might not be receiving any hits.
I recall a Consultant ran a software package during a firewall audit that could do this.
W
...
Hi,
Could you please suggest us the upgrade path from 9.1.6 to 10.0.5. both our panorama and firewall we want to upgrade. Can we jump form 9.1.6 to 10.0.5 directly or we need to follow any path? Please suggest.
Guys, good afternoon.
Today we are at version 8.11, we want to update to the latest version 9.0.12, can we update at once, or we will have to update one version at a time, what is the best practice?
Hi All,
I generated a BPA report for some firewalls and I’m getting most URL-Filtering and DNS Sinkhole as not enabled but on firewall most rules does have URL-filtering and Anti-Spiware profiles have DNS Sinkhole enabled. Please provide option to up
...
Hi all,
I'm seeing that when I run Best Practice Assessments using a customer Panorama Tech Support file it comes up and says "No License Installed" for each of the subscriptions when viewing Adoption Heatmap - Device Groups or Serial Number & Vsys.
...
Hi
I would like to inform you that I am near to complete EDU -110 of Firewall 8.1 but there is a module i have attached had no any video attached due to which I am not able to access my assessment to generate a completion certificate as it is not b
...
on:
NTP autokey auth or NTS on Palo
on:
How to defer allow or block action, only log based on application?
