Hello, Would it be best practice to monitor the HA3 port in Link Monitoring, or is that something the PA would be doing anyway, as its a HA link? Thank you,
I'm wondering if the data that shows up in ACC is dependent upon session end (since that's when we're logging) to be reflected in the ACC data graphs. For example: If I have a host doing a large data transfer, will that information not show up in ACC until the session is finished or is the firewall tracking other things besides traffic monitor l...
Can you upgrade from 7.0.12 directly to 7.1? Is there anything you loose?
Anyone else seen this? All service routes are the same. File upload to WildFire works fine. Nothing blocked in the traffic logs.
https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92703.htm#o92878Say I want to build parity configuration that Checkpoint offers here (above in the URL), but with PANOS.How would I go about doing that ?
Hi, There is a deployment with RSA-ID as OTP and GP as VPN client (3.1 or 3.0). PAN-OS version 7.0.14.After the recent upgrade from 6.x to 7.x an issue showed up - when authenticating from GP - login information is asked twice.This seems like a known issue:https://community.rsa.com/docs/DOC-46969I've adjusted the PA settings according to this: h...
We are using Server 2012r2 RDS gateway and have the PA configured to with a security policy to allow the untrusted traffic (ssl, rds, http) that is NATed to the internal rds gateway. We are seeing a lot of failed audits in the logs on the terminal server. What is the best way to prevent brute force attacks for logins to Active Directory?
Hi guys, We wittnessed a very strange phenomenon this morning.First we received a call that our VPN gateway was not accepting any VPN connections.At the same time we received calls that certain websites were not accessible. These websites had in common that they were SSL encrypted. We have 2 PA-500 firewalls with a HA configuration.SSL decryptio...
I would like to ignore some of the routes learned by OSFP so they don't install in the forwarding table. Important, I'm not talking about suppress/filter routes that my PA announce through OSPF. For explaining me better, I'm looking for "OSPF Inbound Filtering" in the language of Cisco:http://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide...
Hello,I have problem after restarting minemeld it works for about 3 hours and them i can`t load nodes tab. I have loading indicator but nothig happens.Does anyone know what is going on?Best RegardsAdrian
Hello folks, I am considering buying a couple of PA-200 devices from Ebay to some testing and self training.They do not come with support or licensing... Would I be able to configure HA (lite) on these devices?Does HA configuration require both devices to be at the same PAN OS level? Thanks,omatlock
Is there a way to do a specific search for and IP address or mac address in the DHCP logs? I can find and get into the logs but I have to manually look through all the logs to find what I need
Is it possible to allow a user say only 5 youtube video/day and then send customer page saying you have used your 5 videos for today or if someone is watching video for 1hr and then stop youtube video access.
if I'm denying BitTorrent traffic do I need a rule as well for its web-browsing dependacy?
Hi All, I have probolem with dealing with security policy .. i need to allow telnet to specific ports range (2001 - 2005) but by defining them at services field it is working fine but i cant use ping or any other applications even my application foedl is (ANY) , so wondering what is difference between both of them and what i do if want to enable...
OtakarKlier
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
OtakarKlier
on:
Network wifi Management
