Activity in Discussions
GP on Windows 11 - client certificate issue
Our customer is having issues with GP 5.2.10-6 on Windows 11. They are using client certificates for authentication and after a while a connection fails due to no client certificate present. If we check MMC the certificate is present, valid and has p
...Resolved! SLA changes that are made by field change scripts are getting reverted
Hi, I have a a field trigger script assigned to a status field. When it changes, the script stops an SLA and starts another and these are Time To Assignment and Response SLA respectively. I have one tenant that refuses to keep the changes meaning tha
...
Resolved! Agentless User-ID not reading Security Log on AD
I'm pretty new to PA so there may be something obvious that I have missed.
The issue I am having is trying to get the Agentless User-ID connecting and reading Security Logs from AD. All the users are coming up as Unknown:
show user ip-user-mapping al...
Resolved! HTTP Unauthorized Brute Force Attack - ID 40031
Hello all,
I've been receiving these vulnerability alerts, ID 40031, for some time now between two servers, (DMZ to inside), using port 80 (SOAP) and the severity level is high, but I have the action set to "alert" which is the default. I truly do not
...Resolved! What are the capabilities of Cortex XDR without endpoint agents and just with PANOS firewall integration like an NDR solution?
Hello,
My question is what are the capabilities of Cortex XDR without endpoint agents and just with PANOS firewall integration? As the Palo Alto firewall can forward its logs to the XDR for extra checks what are the features that XDR can provide
...Palo Alto rejecting one route
I'm having trouble seeing one route in my RIB and FIB. My BGP peer shows it is advertising the route to the Palo Alto, however I see the following when showing the peer at the PAN:
sstadmin@200-PFW-01> show routing protocol bgp peer peer-name DMVPN-Ro
...Cortex XSOAR - Community Edition Support
Post here for all of your Community Edition support questions and one of our product experts will get back to you soon!
Filenames with slashes not updating
Greetings,
So I have been pulling rasterized images with the names of the URLs attached into XSOAR and attempting to pipe them into some ServiceNow tickets, but character restrictions are giving the system issues on what files to call during the uploa
Country Block and security policy ordering
We are currently setting up policies to block all traffic to\from all countries except a select few. The rules are in place and seem to be working well. As a best practice, do you create a deny rule for all other out of country or do you just let th
...Clientless VPN and hip info collection
Hello Bros'
I have a question regarding the clientless vpn in palo alto, does it supports hist information profile collection for controlling the machines allowed to connect just as it is in GlopalProtect?
How to configure passive HA Panorama ethernet interface
We are currently deploying two Panorama M-series appliances with active/passive configuration. The expected interface configuration will be like this:
Active/Primary Panorama:
Management: 172.20.1.11 (only for Panorama management access)
ethernet1/1:
...We need a static Nat from one source to a single outside IP using multiple Ports to translate to multiple inside private IPS with same source
We need to create a Policy to allow traffic in from a partner that needs to monitor Our Servers.
Outside IP will be one say xx.xx.xx.5 they need to hit 10 diffrent servers on the inside of our network 192.168.1.101-110
THey want to send traffic to
...Need help with Global Protect Internal Gateway
Hello everyone. I am hoping to have some guidance/help on figuring out what I am missing with our internal gateway. Prior to my employment there was an external gateway setup and is working. I have been tasked to create an internal gateway for thi
...check computer name is part of a group
We're planning to enable HIP checks; with on of the checks is domain membership.
However there are cases where a computer will not yet have the domain setup.
We're thinking of creating a device group in AD where those computers can be added.
How do we a
...Why does Paloalo Screw you over during hardware replacement with having to deal with a license?
It is really frustrating when they don't do their job and strand you in the middle of replacing your equipment. Then they don't even answer support calls, you list to their dreadful music.
Copyright 2007 - 2022 - Palo Alto Networks
