Hi Folks, How can i allow only facebook's workplace(https://workplace.fb.com/) ? i have configured url filtering but still no success.Url filtering have configured like below:
Out of curiosity is anyone using Save Filter and Load Filter options under Monitor tab and find them user friendly?I have mentioned to Palo representatives few times that filter field should have droppdown history like browser address bars have but they always suggest to go with save/load option that i really dislike 🙂
Folks. I have a normal Global protect portal for internal staff which works fine. I now have been asked to provide access for a support organisation which is not staff - not employed by our company - but which needs access to certain devices inside our network. Does anyone know if there is any way I can restrict what they access via Global Prote...
Scenario is we have ISP connected to Outside zone.DHCP server on Inside Zone.On Each satellite we have DHCP relay configured to readh DHCP server.Whenever there is any issue with Power at location where interface connected to inside zone goes down.Traffic gets routed to Outside zone and inturn gets discarded session as we dont have security poli...
Mac book throws untrust certificate after user identification timeout.
MAC Book unable to operate with Kerberos authentication. If working, provide configuration details.
The scenario is just allow user access system directly, deny all if using forward or reverse proxy such as nginx、apache2、liqud and so so?? What should i set? Application or other else?
Hello, We would like to report on web browsing based on the IP off the user's computer, not username (or Identity). Can someone offer a guide, or point me in the right direction? Thank you.
Hi, Palo Alto Engineer said clientless VPN will release with new PAN OS 8.0 in near future. I just wanted to know what is the exact release date for new PAN OS? Thanks,Lakshitha.
I need to create my list 'MineMeld-source-List' of blocked IPs which I want to use in the rule. I tried to use prototype stdlib.listIPv4Generic as input where I can add indicators. Then used stdlib.aggregatorIPv4Inbound based aggregator and subsribed firewall to stdlib.feedHCGreen based output (MineMeld-source-List). But on firewall I am getting...
Hi Guys, ASA has a feature where it randomize TCP Sequence numbers to prevent hijack session. Does palo alto has any similar feature. Sorry to compare the products here. My intention is to configure similare setting in firewall. Regards,
Greetings all, We're getting close (hopefully) to rolling out our PAN boxes and I'm working on getting together information to pass up the chain on features like SSL Decryption and SSL certificate security. I've got a few questions concerning best practices on certification generation on the PAN boxes and how the certs are used: Are PAN admins l...
Hi There, I was migrating configuration from Juniper to PA, everything worked as expected except IPSEC VPN. Customer has two sites and both sites have ADSL connection with Dynamic IP address, however on one end Dyn DNS is used. In the below example Site-A has Dyn DNS and www.vpn.com gets updated as soon as IP gets changed on Site-A. But on PA th...
Can I block access to windows 10 store by policy?
Hello, Trying to configure GlobalProtect to work with local accounts and LDAP accounts with an authentication sequence. The PAN is almost seemingly treating the local account as a LDAP account according to the system logs.The account Idea11Support is the local PAN account we are trying to use but it keeps trying to authenticate it against the TA...
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
