Hello Everyone, I need help, i'm trying configure the data filtering for block extension with: .cd5, .4zx and .pekeySomeone already managed to configure data filtering this format? Thanks
Hi, I have a pair of PA-3020 in Active/passive in production that will need to be imported within Panorama 7.0.3. After importing each device config, does anybody knows what will happen while pushing from panorama the device configuration bundle to each firewall...will it break the HA ? Since panorama policy and objects, device and network temp...
Anyone know of a VM series demo video? Been searching web and couldnt find one.
I need to go through my PA and map out the security zones, NAT rules, and so on that have accumulated over the years and I need a tool to help me scrub through the configution and sort out what is going on. I heard there was a tool called Clikr or Clickr or something like that that is an open source tool that is supposed to help with this kind ...
I want to be able to use scp from the firewall to transfer a config file to a remote server without entering a password. So I need to store the remote user's public ssh key in the equivalent of an authorized_keys file on the firewall. Is this possible? What I'm trying to do is schedule an automatic pull of the running-config.xml down to a server...
I have a very small network without a DNS server and I'd like to if possible use a PA200 as a DNS server. I want to try to create static DNS entries for a few hosts on the PA, then point those hosts to the PA as their DNS server. Does this work? Any caveats?
Hello everyone, I want to know if is possible to ask Palo Alto to add this feature to Panorama, we have 100+ firewalls at branch offices, when we applied a software upgrade for example 6.0 - 7.0 it always ask for a reboot to apply the new version (In a perfect world we could reboot the firewall at any time but sadly is not possible until third s...
Hi,I would like to know how to use the unexported-only feature with this command:scp export log traffic to user@ip:/path/test.csv start-time equal 2016/08/14@00:00:00 end-time equal 2016/08/14@23:59:59 Also is it possible to invoke it through the API? Thanks!
I have a network with in my network that I am trying to control access with user-id in the palo alto. Before I can do this I need to get routing working. The routing works just fine up to the palo alto in my test environment. Each interface can talk to the next hop on the otherside but traffic isn't routing across the interfaces. I can not p...
I had a customer connecting to an application from trust to untrust. It was working and then suddenly stopped working.I could see in the logs it was coming as port 443 and application -incomplete and then next day it started working with port 443 and application ssl. Any logical reason why this would happen. Running 7.0.6 PA200.
Hello all, There is a problem with a smb traffic(very very slow)For the related source and dest. ip address 2 filter is configured and show counter output has : flow_fwd_mtu_exceeded 9 3 info flow forward Packets lengths exceeded MTUflow_ipfrag_frag 18 6 info flow ipfrag IP fragments transmitted There is no drop.All devices through the way has m...
Hello, Trying to find out when enhanced-file-transfer appid signature is introducted. Look at the applipadia, there was no date assoicated, or on the firewall. Other than scanning all the appid update release note. What is the easiest way to find out? Thanks,E
The available file types that can be filtered doesn't include Office documents with macros (docm, xlsm, etc). These are being used now to sneak garbage into the network. Is there a way to ID them or are they on the horizon for inclusion in the file blocking filters? An innovative way that is being used is to create an xlsm file with a malicio...
Does anyone know if it's possible to use a domain in a security policy? I know that I can use FQDN but what happens if I need to allow a wider range, such as *.zoom.us? Can this be done or am I out of luck?
Greetings, I have used the following article to distribute client certificates for GlobalProtect: https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Issue-Certificates-to-GlobalProtect-Devices/ta-p/53642 My understanding is that with this method of certificate distribution, all client machines will have the same client certificat...
OtakarKlier
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
OtakarKlier
on:
Network wifi Management
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 7 | |
| 7 | |
| 6 | |
| 4 | |
| 3 |
