Is there a limit on the number of smtp recipients per minute that can be processed by a PA? I've seen other firewalls with limits, depending on the size, so that the impact of worms can be negated.
Hello, When FQDN (port 636) is used in the Address field, user cannot connect. Gets error: LDAP auth server is down!What settings need to be applied so that LDAP server profile can use FQDN besides IP address? Thanks in advance.
Hi! 0.9.26 is a great update - thanks for the hard work. Already using the CIF miner and enjoying the live UI updates. I'm seeing a a bunch of these errors in my engine log: 2016-10-28T21:31:15 (30348)amqp._callback ERROR: Exception in handling update on topic proc-URL-name-HighConfidence with params {u'source': u'proc-URL-name-HighConfi...
What is the latest recommended version?
Hi guys!I'm new to Palo Alto.Scneario:I make a new rule from an inside zone to the internet with the app gmx-mail.gmx-mail depends on web-browsing and ssl.Do I have to add web-browsing and ssl to this rule to make gmx-mail work?Or could I make another separate rule where I'm allowing web-browsing and ssl?Thanks, Alex
I'm currently working on a migration project from Sonicwall (SW) to Palo Alto 3020 (PA) and I need to buy myself some time. For now, I'd like to place the SW inside of the PA so that LAN-WAN traffic will enjoy the benefits of Wildfire, Antivirus, App-ID, and threat detection. Things get a bit complicated, though, due to the SW doing NAT, Ipsec s...
Using the following Phase 1 settings: I keep getting this error:Received unencrypted notify payload (no proposal chosen) from IP x.x.x.x[500] to y.y.y.y[500], ignored...orIKE phase-1 negotiation is failed. Unable to process peer’s SA payload.Check the IKE Crypto profile configuration to verify that the proposals on both sides have a common encry...
Has anyone here used a surveillance system?? I'm in need of a security system, but I don't have any idea on how to select the best one. I recently happened to read an article http://www.fire-monitoring.com/ip-cctv-moving-future/ and thought it will be perfect? Has anyone here used it before?? Any first hand experiences with them??
Does anyone have a definitive list of which applications are required for 365 hosted Skype for Business to work please? I'm using MineMeld to product a dynamic block list of the 365 Skype for Business IP ranges published by Microsoft and I've settled on simply allowing any application to that IP range (which to be fair isn't a huge concern to me...
Hi all I'm struggling to configure a VM-200 with multiple WAN interfaces. I've read a few forum posts on the subject and I understand the suggestions (PBF, 1:1 vs 1:Many NAT, etc) but the situation I'm in is a little different. We are running the VM-200 on a cloud platform, which has provided us two WAN IP addresses. These addresses are contiguo...
I have a network were what I would like to have happen is that the PAN device tracks its connection to the internet and as long as that is alive send a default route to its neighbor. If that fails i would like it to stop sending that default route since the neighbor also has a default route that goes out an mpls link
Hello Experts I have PA on hub site and Cisco ASA at spoke site. At hub site, I have two ISP links, and ASA establish two IPSEC VPN with hub PA through both ISP, one IPSEC is primary and other is backup Now to failover, I am thinking to use VPN monitor on PA but what about I will do on Cisco ASA?
Hello Experts Is there any option to initiate a IPSEC VPN without passing actual traffic. Like in Juniper SRX, there is option "establish-immediately" or in Juniper Netscreen "rekey" option Regards, GR
According to our traffic logs a lot of traffic is denied during a period of 15-20 seconds every time we update applications and threats on our PA-5050. Is this normal? This is all kinds of traffic like mssql-db, web-browsing, ms-sms etc.
OtakarKlier
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
OtakarKlier
on:
Network wifi Management
