Hi, Do we can have a table view on the minors were you can see easily confidence level, state experimental or stable, ... ? Regards, Kevin
I upgraded Panorama to 7.0 and then 7.0.1 recently and it seems to have broken my ntp synchronization in Panorama. Now I get "NTP sync to server x.x.x.x failed, authentication type none". If I run a "show ntp":NTP state: NTP not synched, using local clock NTP server: x.x.x.x status: rejected reachable: no authenticatio...
Error(6986): Protocol error. Check server certificate. Failed to ssl connect to 'globalprotect.xyz.com:443', Disconect ssl and returns false.
I am on OS 7.0.10 and would like to get a nice easy to read list of the rules on my firewall, other than the html exported list does anyone know of a good method?
I have syslog analyzer created from prototype stdlib.localSyslog. Now I want it to send matching results to logstash but on remote not local server where MM is running. Default is I think below (host is 127.0.0.1), where do I change host address ? input { tcp { port => 5514 host => '127.0.0.1' codec => 'json_l...
Hi Guys, Just to clarify that heartbeat ping messages send by bi-direction (Active>Passive and Passive>Active) and these messages proceed by management plane. So if my MP CPU utilisation is always high (98% it is 2050) is it possible to lose ICMP (heartbeat) messages? Cheers,Myky gurus members@reaper@kiwi@BPry
Just trying to understand PAN and policies better. If we want to allow all web-browsing, what can we do? As soon as the application is identified, we will need a policy for this specific application (for example Google base). Otherwise we will hit an interzone default deny (if between zones). I can allow port 80 and 443 as services, but this wil...
Any documentaion on same the sequence of steps when an end host connects to the GlobalProtect system for the first time.
When I install the globalprotect client on a pc I never have to enter a key, how and when does the key get passed
Hi All,Tried generating traffic report from month of May. But, Under Manage Custom Reports > Run now "Result was No Matching Records" Report Setting are: Database: Traffic LogTime Frame: May1-31Sortby: Top 500Group by: 25 GroupsSelected Columns: Destination zOne Do you think we can still see those logs?For PA Admin. How long would our PA devi...
Hello I encountered a strange situationI tried numerous time to connect a global protect agent in version 2.1.x on windows 8 and with a mac tooand I obtain a message can't verified the server certificatI tried to connect with the FQDN specified in the certificate server, and I installed manually the root CA and the intermediate ca in the correct...
Hi guys, What is the meaning of these "link-change" events, as shown below. Kind regardsJack
Hi, Pa-500 show "app mistach" . They have 6.1.0 version and are configured in active-passive mode. They shows in interface web "App version" and "Threat version" Mismatch. If I make a ping to updates.paloaltonetworks.com from devices, my computer and "web ping online" and the this test fails. Is it normal? In system/logs, it shows connection to...
Hi, I have installed Minemild and I applied article and create dbl for Offcie365: https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-using-MineMeld/ta-p/120280 I have cretate 2 rules for Office 365 to test if feed sources Office 365 works. I have a rule to match with feed list office 365 servers and ...
For those that have implemented SSL Decryption in your environment, I'd love to hear your experiences on how you deployed the certificate to Firefox users. There seem to be different methods mentioned, but not certain how reliable they are. Thanks!
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
