General Topics

allowing MS product activation and denying web access

I have a network that I want to allow MS product activation to work but web browsing and other internet activity to be denied.

I have two main security policies that apply just to this network although DNS and ntp is also allowed:

The first one is an a

Layer 2 subinterfaces w/ Vlan interface for routing.....

Say I want to connect this port to a switch downstream (trunk), with clients hanging off of switch on access ports and use vlan interfaces for routing. Switch is set to trunk allowing relevant vlans, the firewall interface is subinterfaced (layer2) w

Is it possible to block video calls only from whatsapp, skype, imo etc??

we want to block only video calls only from the application whats app, skype, IMO etc. Is there any way to acheive it?

QUIC decryption? A TCP replacement

It seems like QUIC is going to become main stream, Its not just this linked video, I am seeing QUIC related stuff increasingly now. As per docs I see even for 10.2 its advised to block udp 80/443 and block QUIC. I would guess Palo Alto bringing QUIC

GlobalProtect Version

Hi Team,

We are currently running 6.0.5 GP client version, now we are planning to upgrade the version in Prisma. May i know which version is the best version as we faced few issues in 6.2.0 for different customer not sure which is the better version

Palo Alto laboratory

Hi, I would like to create a laboratory. Where I will use Palo Alto (PA-3050). Is there any possibility to create something like a virtual machine for 10 users from this one PA? I would like 10 people to use this one at the same time.

If anyone knows

SYSTEM ALERT : high : Delete Cert

HI Folks,

Getting below alret from the panorama.

FW: PAN-M-600-Secondary - SYSTEM ALERT : high : Delete Cert '4aba874e-912d-4967-993e-b3c24058f841

Kindly help me to know what we have to do for this high alert.

Beacon - E-LEarning course pop up error

Hi All,

So last few days i am going through the e-learning course for PRMuA (Prisma Access)

completed a number of courses and assessments sofar but today, when I completed the Security Policy and Security Profiles - however I get a warning error with

Generate traffic report to identify any suspicious traffic

Hi members,

I would like ask if there is way to generate a traffic report for palo alto firewall to show case if the network traffic had any suspicious attack or abnormal traffic for past 1 year ? additionally i have a panorama manage the firewall

generate one time password on the portal is not working for panorama managed firewalls

There seems to be an issue on the portal trying to generate a one time password for panorama managed firewalls. Either the tool is broken or there is a limitation cause it will alow me to do one but not many. Has anyone else run into this? Do we know