Does anyone know if it's possible to use a domain in a security policy? I know that I can use FQDN but what happens if I need to allow a wider range, such as *.zoom.us? Can this be done or am I out of luck?
Greetings, I have used the following article to distribute client certificates for GlobalProtect: https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Issue-Certificates-to-GlobalProtect-Devices/ta-p/53642 My understanding is that with this method of certificate distribution, all client machines will have the same client certificat...
Hello, Trying to find out when enhanced-file-transfer appid signature is introducted. Look at the applipadia, there was no date assoicated, or on the firewall. Other than scanning all the appid update release note. What is the easiest way to find out? Thanks,E
Hello I will migrate fom PA200 to PA500. I have some local networks (DMZ, Wifi for students, Wifi for stuff, LANs)I need to use QoS but I need some advice with that. I know that I can controll only on outgoing interfaces but I have no idea how to get it working with one condition: I wouldnt limit traffic from/to my local servers in DMZ. Now I ha...
Can some please these are the initial steps for setting up VM-300 in NSX? 1) Register auth codes for VM's2) Download the base-image on he VM that will host VM-300 firewall3) When download of sofware is complete I should UUID an dCPUUID4) After base configuration in VmWare NSX is completed I will be about to go to portal and register the new V...
Does anyone know if the PA-500 can be mounted using a 19" Rack mall mount bracket?(Front = Up) (Back = Down).Using something similar to this?https://www.startech.com/Server-Management/Racks/2U-19in-Steel-Vertical-Wall-Mount-Equipment-Rack-Bracket~RK219WALLV
Hi, Even though the PA firewalls is detecting the traffic is Ultrasurf, the application is still working. I've got a security rule to block by application 'Ultrasurf', and we have SSL decryption as well. thanks
Hello People, My client has receently upgraded to 7.1.3 and now the management plane is constantly running 100% on all firewalls. This is the following message displayed and filling up the userid.log 2016-07-22 16:43:38.660 +0100 Error: pan_user_id_agent_msgs_queue_msg(pan_user_id_agent_msgs.c:58): failed to insert msg into sending msg list We...
Looking for advice on cheapest way to learn Palo Alto? I am a consultant and dont have any Palo Alto licenses. Is a VM lab license affordable, is there trials or is ebay the best option? Thanks in advance!
Hi, I only can reach the mgmt interface. But not the other L3 interfaces, I tried setting those IPs @ the same vSwitch where the mgmt interface resides, but nothing. There are 2 Windows VMs (2008/XP) they see each other in any switch I configure them, but I can't get this work with the VM200 at VSphere. I tried setting it locally and the same r...
Hi I want to test PA in Unetlab 10.0-12https://nbctcp.wordpress.com/2015/06/26/bypass-firewall/But I don't have URL Filter eval license. QUESTIONS1. how to get eval license for 2 PA because I also need to test OSPF between 2 PAs2. with eval license beside URL Filter, what other features I can test tq
I have multiple remote sites that connect back to a main site through PA-200's, using Charter Communications cable modems. At various times the PA's stop forwarding traffic. I can no longer reach the PA's and I have setup management on the outside ip addresses. The only way to recover from this is to have someone at the remote site power cycl...
Hello community, It is possible to add more one secondary NTP server ?I need to add two ips (ntp server) like a secondary ntp servers, it is possible? In PANOS 6.1.10. Best RegardsAndres Padilla
I got why huge traffic is coming to port 3978.Application is identified as Panorama.Its hge Gbs of traffic in one session.The source IP is firewall management Ip and destination is Panorama IP.But why i need to kill this session means, we have a setup of 2 ISPs. We prefere this traffic should go through 1 ISP only one ISP.Tht we accomplish throu...
Hello,We are starting to deploy UserID based policies across our enterprise.I'd like to know what is the best practice when dealing with rule policies that cross multiple zones/firewalls that are in different locations?Does the user portion of the rule only need to be as close to the client then go to network rules in between the firewalls and r...
PavelK
on:
Replacement of RMA
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 6 | |
| 4 | |
| 3 | |
| 3 | |
| 2 |
