Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
One problem I'm running into with the Palo cli is the ability to search the configuration for configuration matching on multiple criteria. For instance, I'd like to display output showing all disabled security policies that include a description.
I c
...
HI
imagine this scenario:
Internet 1.1.1.1 PA 2.2.2.1 ---- 2.2.2.2 ROUTER 3.3.3.0/24 network
I am forwarding all packets received to 1.1.1.1 https to 2.2.2.2 https which then re-nat to 3.3.3.0/24 host
With a stupid dlink 50$ router instead of the P
...
I have been given a PA200 to setup at home to get myself familiar with Palo Alto firewalls. I have a cable modem and wireless router that will need to be connected to the PA200. I have followed the instructions on this article to get it setup:
https
...
I'm trying to figure out how to NAT a single server and port to my external IP address if the outside interface from the ISP is dynamic. How do I translate it if I don't have a destination address?
Hello Everyone,
I need help, i'm trying configure the data filtering for block extension with: .cd5, .4zx and .pekey
Someone already managed to configure data filtering this format?
Thanks
Hi,
I have a pair of PA-3020 in Active/passive in production that will need to be imported within Panorama 7.0.3.
After importing each device config, does anybody knows what will happen while pushing from panorama the device configuration bundle to
...
I need to go through my PA and map out the security zones, NAT rules, and so on that have accumulated over the years and I need a tool to help me scrub through the configution and sort out what is going on. I heard there was a tool called Clikr or C
...
I want to be able to use scp from the firewall to transfer a config file to a remote server without entering a password. So I need to store the remote user's public ssh key in the equivalent of an authorized_keys file on the firewall. Is this possibl
...
I have a very small network without a DNS server and I'd like to if possible use a PA200 as a DNS server. I want to try to create static DNS entries for a few hosts on the PA, then point those hosts to the PA as their DNS server. Does this work? A
...
Hello everyone,
I want to know if is possible to ask Palo Alto to add this feature to Panorama, we have 100+ firewalls at branch offices, when we applied a software upgrade for example 6.0 - 7.0 it always ask for a reboot to apply the new version (In
...
Hi,
I would like to know how to use the unexported-only feature with this command:
scp export log traffic to user@ip:/path/test.csv start-time equal 2016/08/14@00:00:00 end-time equal 2016/08/14@23:59:59
Also is it possible to invoke it through the API
...
I have a network with in my network that I am trying to control access with user-id in the palo alto. Before I can do this I need to get routing working. The routing works just fine up to the palo alto in my test environment. Each interface can ta
...
Hi,
Are there any plans to include IP addresses in the logs emitted from the Traps ESM server? Currently only the system hostname appear to be in the logs, per documenation. IP addresses could be useful for querying against flow, pcaps, etc.
Thanks!
J
...
I had a customer connecting to an application from trust to untrust. It was working and then suddenly stopped working.
I could see in the logs it was coming as port 443 and application -incomplete and then next day it started working with port 443 and
...
reaper
on:
Tunnel Monitoring
reaper
on:
Global Protect need to ask for password all time we connect
reaper
on:
GlobalProtect Android version 13 issue
