Hello, Application Override to a custom application will force the firewall to bypass Content and Threat inspection I've read several documents but I still don't understand the point of doing this. What's the point? Thanks
Hello, I don't understand why it is said that the single pass parallel processing performs operations once per packet.What does this mean? Firstly, the single-pass software performs operations once per package. Thanks
Hello, I don't understand the difference between candidate configuration and running configuration. Before committing when I'm making changes it's the running configuration and when I commit it becomes candidate configuration? Another question. I've made a commit and I'd like to rollback how do I do it?
I've had an issue recently where randomly I've had members of my VPN mesh start to have the tunnel monitors going up and down constantly which causes BGP to never be able to establish with the peer since the static routes to the loopbacks are pulled from the route table. This has happened randomly to 2-3 sites back to either of the hubs. When ...
As most with a PA-220 have experienced, regardless version running (currently latest 10.2.3-h2) root partition fills up all the time and have to run the disk-usage cleanup commands manually and tried enabling aggressive-cleaning as well, it just continuously hits level/ But it just fills up all the effin time:-) With the root disk issues seemi...
Running configuration sync is not happening between HA peers(PA-5050). We tried manually from Passive firewall CLI by the command request high-availability sync-to-remote running-config but I are getting the error Server error: Failed to synchronize running configuration with HA peer; operation not allowed: URL Database mismatch.I have restarte...
Dear Team, I noticed something unusual during my testing. PA-445 was configured as HA. The front LED of typical firewall hardware is orange when in the passive state. However, for the PA-445, both Active and Passive Devices are green. As a result, active and passive cannot be distinguished visually. The PAN-OS version in use is 11.1....
Hi I'm configuring a new PA-500 and have it working for source NAT going from Tusted to Internet. Now I want to create a destination NAT rule to allow traffic in to a web server located on the trusted net. I have created a rule almost exactly as it shows in the Admin guide but I'm getting the error - “nat rule “Incoming Web”: Mismatch destinatio...
There is not a community discussion for issues implementing 10.2.9-h1 We have a maintenance window to push out 10.2.9-h1 Thursday evening and with recent issues with 1.2.7.h3 and other roll outs i am starting this thread for the community.
Received this high-alert message on a PA5220 (10.0.8-h4) this morning, "MLAV cloud error, all machine Learning engines stopped". Has anyone else received this message before? If so, what steps should I take to troubleshoot and resolve the message? Thank you.
Hi there, I have multiple client authentication configurations set up on my GlobalProtect portal which use the same OS type.Order is as follows: 1 - Windows OS with local auth on the firewall.2 - Windows OS with LDAP auth. What i want to achieve is if authentication fails with local auth, it tries LDAP auth and keeps going down the list until it...
Hi, I am curious why palo alto networks does not have a "security for good program" or donation program for non profits? Palo Alto is a large company and I think it would be an awesome move for them. Some of the companies that have one are Cisco and Cisco Meraki New Relic Microsoft Splunk Tenable (Nessus) AWS Symantec Avast
Hi folks, I newly created a new vsys for my ha-pair in my panorama. I have also created a new device-group but only use a single template for both vsys. I've tried to create a new subinterface in my new vsys. The interface is already connected to my first vsys. The commit on panorama works fine. The push to the device ends in a "commit failed"...
We have a domain that is going out of commission, so I need to move the palo alto firewall management software to a different domain. Is there a safe way of doing this?
I have created a site to site and both phase 1 and 2 are up. Network interfaces are configured as below Static routes are configured for S2S tunnels Policy is being hit but not reply Initiated a ping from a switch on the inside 192.168.1.0/24 to 192.168.2.0/24 Routing What am I missing here?
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
