Is it possible to use interfaces on PA-5020 as span or mirrored ports of other active interfaces on the same device?
Hi I'm attempting to implement userID on PAN-OS 7.0.6 within a multi-domain forest. All of our workstations exist on one domain and users logging into those workstations exist on another domain within the same forest. I have the UserID agent setup on a member server on the workstation domain and it can correctly map the IP address to usernames...
Hello Community, I have set up a lab environment shown in the below below that is meant to allow access from 192.168.1.X to the sever 10.2.2.1 using static NAT ip address 192.168.1.251 I have configured everything as demonstrated in the CBT Nugget see below for the NAT and Security Policies However, the policy wont
For various business reasons I need to allow SSH directly to a PA-3020 to manage the unit. Is there a way to apply a vulenerability policy to this traffic so that I can block bruteforce attacks? Thanks Dustin
Hi Guys, I know application FTP covers both Passive and Active FTP. However, my question is how it filters the traffic. I mean how a server Intiating a connection to the client will be filtered and allowed. Can anyone help.
We have numerous PA firewalls that alert for vulnerabilities. I also have a product that scans for vulnerabilities in my network. The scanning device has CVE numbers in its events. The PA has PA's unique identifier in its event. Is there a way for me to pull in the CVE into the Pans threat event so I can correlate the PANs threat events to my ex...
I upgraded our Panorama and two PA3020's in a HA setup this morning. Afterwords I am getting the following errors committing from Panorama to our PA3020's. Details: . Configuration committed successfully Warnings: . vsys1 (vsys1) . Warning: NAT DIPP rule Source-NAT-Rules: Needed translated addresses space after multplying oversubscrition...
Hi all, do you know if it is possible to use the syslog parser to obtain device information (for instance Operating system) and use this info in security rules?. I am using the syslog parser to obtain the IP-User mapping and it works perfectly, now I would like to obtain more info from the log. I know that the device info is available if you use...
Hello everyone, When I have 2 firewalls in an HA state after a few minutes my primary device gets a Non-functional (Drive error detected). I normally fix this by suspending the local device on my passive firewall. Is there a way to keep both devices up with out having to manually reset the local device. Thanks, Jeff
we have a panorama managed firewall and we push objects from panorama to it . we are considering to make a HA firewall setup . as per articles from PaloAlto , Panorama objects are not being synchronized.Question 1 : Should we add secondary firewall to Panorama prior to forming HA cluster and ensure it's completely synced up ? Question 2 : Is the...
Hello, does anyone know, what genindex.sh is exactly for any how often or by what it is triggered ? It consumes more than 50% CPU for longer periods ( >10min ) of time watching with "show system resources follow"
Is there a reason why with Agentless User-ID I still never see any logs in Monitor? As shown below it definitaely is working but traffice logs do not sohw user-ids. I have a any any policy and user-id box is checked on the zones. ANy ideas? I ahve agent on a 2012 server I do see in logs ia se failed to connecr to LDAP but def its working from ...
hi, We have a PA200 in version 6.1.0 and we install the versions 6.1.11 but we receive this error: "Failed to install 61.11 with following errors. SW version is 6.1.11 Error: At least one local superuser should be defined in Administrator. Failed to install version 6.1.11 type panos." We have created 3 local superuser admins. so we dont kn...
Hi all, Does anybody try to configure ECMP ? I did and it works perfectly. Only one question: on which condition, palo stop sending traffic through one of the ECMP gateway ? I tried many config but the only one working is to shut the palo interface. Mean there is no path monitoring ? Waht's happen id the telco link is done ? What's happ...
Hi All, I'm new to Palo Alto and have been having issues with content loading on my network. Across the network, webpages that are being loaded in browser will periodically hang and as soon as the user refreshes them they load right away. Also video streaming and image viewing applications appear to behave the same way in that a user will try ...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
