Hi all, I have enabled VPNC for my Linux users who cannot use GlobalProtect. Does VPNC use port 443 like globalprotect? Can't seem to find any information about this on the web. -Matt
Hi, I'm trying to do some debugging of some OSPF troubles that we are having and I'd like to restart the OSPF process to see the neighbors comes up and the LSA exchange. How do I do this via CLI? On a Cisco router it would be "clear ip ospf process X", but I can't find a Palo Alto equivalent. Thanks
Hi All, I'm experiencing a problem with GlobalProtect and I'm hoping I can get some assistance. I'm able to log on to the GlobalProtect Gateway. I successfully log in and Download the agent. However, when I click 'Connect'. I get an error that says: 'CONNECTION TO SERVICE SOCKET FAILED'. I tried collecting logs from the GlobalProtect clien...
I have serveral version of the OS under the device\software tab, is there first any harm to deleted old unused ones and will I regain disk space, a usefull amount?. I want to keep more logs on the box and am looking for ways to increase the space for logging. Any suggestions will be appreciated.
When I go to Monitor->Report tab . Under Custom Reports I see 3 reports. One of the report test_report shows in there but is not in my Manager Custom Reports. I tried deleting it using delete report custom scope 1 report-name test_report file-name * I am getting an error. Server error : unable to remove directory for 'test_report'
What are the chances PA will be next with backdoor revealed? 🙂
HiWe're running 4.0.1 in a test environment. We have a large Checkpoint rulebase that we will export. It ideally needs a rule tidy up to remove unused rules and objects.Can someone describe how the "Highlight Unused Rules" tick box option on the policy page works. Yep, I know it sounds obvious!! But what is it based on - the logs? If so how far ...
Our firewall is setup to export Netflow data to Nagios Network Analyzer. We need to know: a) How often is data exported from the Palo Alto to the NNA collector, and b) How large are the packets sent from the Palo to the collector Any ideas on where to find this information?
Hi, We have Cisco ACS which authenticates our wireless users(mobile phones,laptops).How can i configure Palo Alto and Cisco ACS to collect User-IP mapping? PA version 7.0.3 , ACS version 5.7
I have a couple of Nintendo consoles on the network which would like to connect for online gaming. I am on a cable connection so am using Dyndns lookup for my external-IP. I have the following Bi-Directional NAT policies configured. Application Group Security Policy NAT Policy It seems to work with the Wii U but not with the 3DS...
Hi,I want to decrypt Dropbox but it doesn't work. I have a catch-all decrypt policy that decrypts any-any SSL. It works fine except for Dropbox. My understanding is that Dropbox is on the PanOS internal exception list so decryption is supposed to be disabled automatically for DB. Looking at my traffic logs, I can confirm that application dropbox...
Currently for Global Protect we route all traffic through the firewall. Is there a way we can add IP’s to the routing table for GP clients only? For instance, add GoToMeeting IPs and have all that traffic go out the Internet. Is this possible?
Has anyone looked into doing any QOS for the PARCC assesment testing? Right now I'm not doing any QOS on our 5050, but think it would be a good idea to do something so the testing gets priority over some staff member watching Netflix during their break period.
I have a pa 3020 running 6.0.8 doing LDAP lookups to multiple edir servers, I have many users that PA shows as unknown but when I look on the server I see they are logged in x.x.x.x Why does this work for some but not all? I have done the following: debug user-id refresh user-id agent all debug software restart user-id show user server-monit...
With PA-200 there is a command similar to: set system setting fan-mode auto in order to throttle the onboard fan(s) so it doesnt rev up to max rpm and stays there as it normally might do. But this command doesnt seem to exist for the PA-500 series or am I missing somthing here? All I could find is (output from: show system environmental)...
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
