Hello everyone, Having an issue with OSPF neighborship constantly going up and down after reboot. Please see below: Has anyone had a similar issue? Thanks,Myky
Hi all,I'd be interested to here is anyone has come up with interesting naming schemes for AD groups used within Palo Alto firewall policies.I'm looking for inspiration as I'm looking to come up with a logical scheme on our end. Cheers.
I have a cluster of two Panorama systems. When I try the local admin account on the primary-active node the system generates a log entry saying that 'failed authentication for user admin. Reason: User is in locked users list. The same account name and password works on the secondary-passive node though. Any idea what's going on the admin acc...
I'm trying to test a few urls in a custom url category I have deployed on my FW, but am unable to get to work. All my rules/objects are pushed out via Panorama and it seems as though the command only allows you to test locally defined rules (i get an error when specifying the rule name unless i use a local one). I don't see this test custom-ur...
Hi,I have setup a decryption policy to decrypt inbound SSL traffic for the Exchange web mail server. However, when I check the logs I see only some traffic as decrypted and some arnn't. Refer below screenshots,Why isn't the policy not decrypting all the traffic?I'm trying to decommission the Microsoft ISA server used as reverse proxy for Exchnag...
Hi guys,I'm working on a GP portal and gateway configuration, in order to provide to the customer full compatibility with the old vpn clients (ex: cisco) I enabled X-Auth support on it. The client with a third party software authenticates but it always gets a default route 0.0.0.0 and not the single networks specified in the GP Gateway-->Clie...
Hello, I try to access to the WF-500 via the Mgmt interface but I found the error message in the attachement. What is the reason of this issue ? what should i do to resolve this problem? I will appreciate all your helps.
Please tell me why send a email with BMP image will judged to be a threat?The firewall will show up a threaten sentence, during the sending job..Please help me here. Thank you. Threat Details： Name: IBM Lotus Domino BMP Parsing Integer Overflow VulnerabilityID: 38197DescriptionIBM Lotus Domino is prone to an integer overflow vulnerability while ...
HI All, what is the difference between Botnet report and DNS Sinkholing? we can see the botnet reports to identify the infected machine by identifing the connection requests to the malicius URL repetedly, please help me to understand this. Thank you,Guru
Does the firewall support RFC 3021 IP Space aka 255.255.255.254 mask on routed point to point interfaces?Thanks,Ray.
Hello, There are two hotfixes released for 7.0.8. Anyone from PAN TAC can share the detail about what got fixed? Thanks, ~E
Hi Guys, Having problems with a site2site VPN connection on a palo alto firewall. It seems to randomly drop and stop working. Sometimes it will stay up for days then drop and other times it stays up for about an hour and then drop. I have followed various guides from palo and Microsoft (this is a VPN to MS Azure) on how to configure it and as I ...
Is there a way to change the default ping size from 56 bytes? I know there is a switch to change the size but I'm interested in knowing if the default can be changed.
Hello, anybody has experience with user group integration with FreeIPA ldap server?I have tried many different settings with no success. With some settings i can see groups but they seems to be empty.show user group list - shows proper groups, butshow user group name some_group_name - shows nothing but source type: servicesource: LDAP_pr...
Hello All, I hope that you can help me with one, I would say, common task but I'm unable to find right answer to this.We are using PA-500 and behind it, there is 5 servers. We also using Global Protect for accessing to servers.I need to setup on PA-500 that one specific user need to access only to one specific server, while all other users can a...
