We are employing GlobalProtect VPN on our PA, which also happens to be our intranet gateway (NAT) to the Internet. Technically speaking, the setup works very well. Because port 443 is typically open on most firewalls, we can connect to the VPN virtua
...
Suggest a category for Social Media be added.
We have a request from our teachers for a way to block access to the internet based on students' username.Oh - and the teacher needs to be able to grant or deny this access from a simple interface...
Myself and my colleague are scratching our heads
...
Hi All,
Please let me know, whether PA supports agentless(GlobalProtect) remote access VPN? With SSL or IPSec.
If it supports, please let me know how to configure it.
Thank you in advance..
This is a fork of https://live.paloaltonetworks.com/t5/General-Topics/Statistics-reports-on-how-much-SSL-traffic-you-got/m-p/67945 but with a specific question.
Dealing with reports in PA I wonder if the counters/statistics regarding appid ssl incl
...
Hello all,
My cusotmer wants to block apache commons collection of vulnerability.
I have searched it on threat vault but there is never nothing.
Is there a vulnerability signature for apache commons collection?
If no there is not, Can PA detect e
...
We started getting complaints from users that various Google services were showing intermittent disconnects. I think we've tracked it down to the QUIC protocol not being accurately identified by the PAN firewalls and getting blocked. I see 443/udp tr
...
Is there a way to export the current Security and NAT Policies to CSV, or even just PDF?
I need to clean up a dirty firewall that I inherited, but I need other teams to let me know what is active/inactive. Screenshots or CLI outputs can work, but I
...
Hi, any of you who knows if there is a whitepaper or such on how to generate a report or otherwise pick out the numbers/figures/graphs for how much SSL-traffic you got vs non SSL-traffic through a PA device?
That is both in bandwidth and number of
...
Hello All, Was just wondering if anyone may be able to help with this our question.
Please see the attached High Level Diagram. Both Firewalls are PA 3020's with the full licence set enabled. We need to replace the ISA server which is not providing
...
The scenario is 3 firewalls, with PA-HO acting as the hub and PA-1 and PA-2 as the branch sites. The Branch sites connect to the head office network via ipsec tunnels to PA-HO and vice-versa.
Due to multple dis-contigous subnets on the branches, it w
...
Hello.
I want to know my question what address and EBL maximum from you.
1.
https://live.paloaltonetworks.com/t5/Configuration-Articles/Using-IP-Address-Lists-on-Palo-Alto-Networks-Policies/ta-p/57411
The above documnet describes " Each imported
...
Hi guys
Anyone know where is the path where the logs are stored FW CLI ?
I hope your commentes
regards
Hi,
My query is about how the Palo Alto firewall timestamps logs when it sends them to a syslog server. Does it stamp the logs with UTC (GMT) time or does it use the configured local time as the timestamp? I notice when reviewing logs on the device
...
While troubleshooting a user's inability to connect to GlobalProtect, I wanted to verify there were IPs available. However, the IP pool did not appear under the DHCP servers. How can I check to make sure there are IPs available within the IP pool t
...
OtakarKlier
on:
How can I get the CCATS for exporting in US
BPry
on:
security policy in monitor mode only
BPry
on:
The machine on which Cortex XDR agent is installed is not showing the Windows key (Start Menu) option.
OtakarKlier
on:
Factory Reset
| User | Likes Count |
|---|---|
| 10 | |
| 6 | |
| 6 | |
| 5 | |
| 5 |
