I have installed a VM-100 and was able to configure the management interface. When I go under the network tab all interfaces are showing as down. How do I get an interface to go into an up state?
We're getting a lot of blocked traffic on UDP port 80 and 443. From looking into it this is Google's new QUIC protocol over Chrome. What is everyone else doing in this case? I'd prefer not to allow all UDP traffic over port 80 & 443. Any chance off an App-ID for this?
Hi there, I had an interesting go round with PAN support involving proxy ARP and source NAT. Background: I don’t use the PAN for public ingress/egress traffic, for me it is for internal DMZs only. As such, I’ve not had the opportunity to utilize the NAT policy features. Things do change however and now I’m at a place where I plan on using t...
Hello Community, Can someone give me a general guide as to license costs. For example, if I wanted purchase, URL Filtering license or Antivirus or Anti-spyware license for a year, how much would that cost me as an individual as opposed to a corporation or a business? Thanks
Hi Guys, Can PA do packet capture in Sub-interfaces? Thanks in advance!
We're in a situation where we have mutliple PA firewalls deployed and many of them have their own GP SSL VPN set up (e.g. Manangement range, lab, severeal different customer "islands"). The lack of "connection profiles" within the GP Client is a real pain point for us. We've talked to our client reps about this several times, including making ...
Hello Community, I would like to set an Antivirus action to 'Block', but for some reason that option isn't available, see image. However, it has been available on my other PA-VM. Can someone explain why I can't see that option here?
When users download the GP client from my portal and install it, the gateway field is blank. I've configured the gateway in the Globalprotect Portal>Agent Configuration>Gateways. Is there a way to have the gateway information pre-filled?
Hi All, We are using kaseya for monitoring palo alto firewall it was working fine month back but suddenly it stopped and we are getting "Timeout while waiting for response from agent." for all the montors we set up for the anyboady know the solution for this? Regards, Kotresha
Hi, Having an issue with IPSec tunnels. Sometimes (not all the time), phase 1 can't be established because IKE traffic is being treated as "ciscovpn" instead of ike and being discarded. Once I clear the session, the next session establishes correctly and works perfectly fine. Both sides of ipsec tunnel are terminated on Cisco routers. Is there a...
Hi all, I was able to ping external server from firewall and getting reply back from the server without any issues, however in firewall log it's showing aged out. Anybody know the reason behind this?why we are getting agedout after proper response from the external server?? Regards, Kotresha
Hello, Is there a way to modify Loopback Interfaces in firewalls previously pushed from Panorama ? We cannot override it in the GUI with the override Button ? Tryed in 7.0.7 amd 7.1 Is this a supported Feature ?
Hi, I need to upgrade from 7.0.6 to 7.1.2. The image base is 7.1.0 right?? i saw a lot of 7.0.1-bxxx, why?? any known bug or big change in this 7.1.2??? Thanks
Hi Guys, Can you explain to me what types of the certificates l can use and where can l get them from? For SSL decryption, we do not want to use the self-signed cert. Thank you, Mykhaylo
I have been testing decryption and different apps on our iPads. With decryption turned on we are not able to use different apps, for example Facebook. Now if I use a browser and go to Facebook, I am fine. Anybody do any testing with decrypting the iPad or iPhone traffic and getting Facebook to work? I am hoping that once I figure out how to ge...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
