Is there a way to configure Global Protect to disallow connectinos from an Open Wifi network. Could a HIP Object that could detect this?
Hello All, Its that time for me to upgrade and 6.1.8 has been out for over a month now. Has anyone installed it and expereinced any issues? I'm currently running 6.1.5, but there are some cve's and other items that are corrected and I dont want to fall too far behind. I'm too chicken to go to 7.0.x at the moment so I's sticking with the 6.1.x tr...
Hi Team, Can anyone confirm that 3060 model can support PANOS 6.0.9 ?
Hi, Commit taking very long time than expected , Before it was working fine . How can i find the cause behind it Thank you
Hi, How to create a historical report for the below no of session per secondno of new session created in a second Thank you
Hi All, We have the setup as shown below, In this scenario, Layer 2 switch (2960) showing the MAC address of the Exchange server learnt through the interface of the switch Gi 0/1 which connects to the PAN firewall in V-wire mode to an ASA . We connected PA direclty to Core switch and made a static entry in switch for MAC address entry the por...
Hi, The VM-Series Deployment Guide says we can add additional disk space of 40GB to 2TB for logging purposes. Does anyone know how to do that in production? Thanks.
Hi all, Any info about Firestorm bug and Palo Alto Firewall ?? http://www.bugsec.com/news/firestorm/ Regards, HA
Hello Community! I wonder if anyone else is getting a FalsPositive-Hit in AntiVirus-Protection on downloading Silverlight.exe? When we use the following Link: http://go.microsoft.com/fwlink/?LinkID=623682 the page is blocked do to AntiVirus-Profile. In our ThreatLog we can see that the file Silverlight.exe is beeing blocked because it is ide...
Hi, Distribution switch with multiple vlan created L3 interfaces . Multiple Edge switch connected with distribution switch via L2 trunk . if i have vlan 2 -10 configured with respective L3 interfaces like 10.0.2.1,10.0.3.1..10.0.10.1 , and i want to monitor traffic between these vlan How can i configure ?How the physical toplogy and logical topl...
Has anyone managed to get authentication on PAN-OS 7.0 working with microsoft NPS servers? Since version 7.0 authentication against our microsoft NPS radius servers is broken. Because the firewall now always first tries CHAP instead op PAP (see this article) and microsoft NPS always replies with a ACCESS-REJECT massage (see this article -> it...
So trying to further classify RPC data as the correct type of RPC data based on program number (300029 in this case). Not trying to re-invent the wheel though on how PA already correctly classifies it as RPC data, curious if there is a way in a custom App-ID to say something like "If known_existing_app AND XYZ then new_custom_app_ID", i.e. "If ...
Hi All,A somewhat interesting scenario pre-christmas here. I'm tasked with setting up a site-to-site VPN between a PA3020 and PA-200. The PA-200 will be connecting with PPPoE - which I've never set up before. I have some concerns on this and was wondering if anyone with some experience with a similar scenario can help with these questions: 1. ...
We are getting continuous alert from the firewall (SYSTEM ALERT : high : cdb: Exited 4 times, waiting 510 seconds to retry), Anybody is having any idea or came across similar alerts.
Could someone please post the CLI command to restart the log-receiver service for Panorama 7.0.2. Unfortunately this document does not include 7.0.
