As far as I am aware Panorama doesn't have counters so are the unused rules identified based on counters or similar from the devices in the device-group or based on traffic logs?
how are application and service treated in a given policy?multiple apps in a policy?multiple services in a policy?apps and services in a policy?how are the different scenarios and'ed or or'ed?ThanksDavid
Hello.I want to make the following network-diagram. Is it possible?A Cisco Nexus PaloaltoVRF-1 ----------------------> eth1/1.1 | 1.1.1.1 | VR : default | trust tag 10 | |VRF-2 <--------------------- eth1/1.2 | 2.2.1.1 | VR ...
Hello,I want to make custom application(or vulnerability) from MIME type.EXE of MIME Type is 'application/x-msdownload'So I made two customer applications as the following patterns.1. application/x\-msdownload2. \x61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 73 64 6f 77 6e 6c 6f 61 64\xBut FW detected these custom applications which are tried to...
Does anyone have the ciphers list to configure on ISS and Apache that will fully support decryption? We're running PAN-OS 6.0.
Let's say we have an external facing interface Ethernet1/3 with Ip address of 1.1.1.14/28. The upstream isp router is 1.1.1.1 all other addresses (1.1.1.2-1.1.1.14) are routed to the Palo Alto and in use for various web services, etc..Per the documentation I can find it looks like you have to set the Global Protect gateway IP address to th...
Hallo all,i have only one phyical ethernet interface on firewall which is facing the internet. I also want to make this PA firewall as an IPSEC Tunnel endpoint. So all my internal traffic uses this ethernet interface to go to internet. And VPN traffic should terminate on the same interface.Is this possible? If yes, how can I implement it? Any do...
Does PAN support sha512 for forward trust certificate?Thanks,
I am looking to what I would call port address translation, but am unfamiliar with how to do it on the PA. Basically I need a public IP to route SNMP traffic to one inside address, and syslog traffic to another inside address. This will also only apply to a single host from the outside. Can someone give me high level steps to what I need to conf...
Have a question about the functionality of WildFire. Here is the scenario (assume we have a WildFire subscription so we are getting updates every 30 minutes):User gets an email to download "file.exe" at 0800This hash does not match anything and is sent up to the cloud for analysis.Analysis confirms this file is / has malware - it has not seen t...
We are using 4 User-id Agents and today some users started experiencing problems with certain sites they use. The same sites for all users.... but not all sites. We have many ad group based rules and some are still working while others seem to have stopped working.Looking at the logs I see their userid isn't detected for the blocked traffic bu...
Hello AllOut of the box, my 3050 Firewall had PAN OS 5.0.x and I wanted to upgrade it to.the latest 6.0.5 release. My Firewall does not have internet access yet, and so all the following things were done offline by downloading files on my laptop.So, I updated Application and Antivirus signatures, uploaded the base image of 6.0.0 to the firewall ...
Does anyone have any information on how to get user-id to work with a VMware View security server sitting in the DMZ? Right now the only way we can get PCoIP traffic to flow to is by specifying the ip of the VDI machine that is being connected to. What we would like is to define an AD group for remote access and populate the users into that grou...
I have a portal and 3 gateway's setup. From my home network and a couple other home networks Global Protect works with no issues, We can disable the client, re enable it, change to different gateways on the fly and it connects right up.Now for some others, and my dsl at work, coffee shop downstairs, they can connect to the GP Portal the primar...
We just attempted to upgrade some 5020's to 5.0.14-h3(mainly to patch the evasion vulnerability) and quickly found that the upgrade broke traffic traversing the firewall. During the short period of time it we were running on 5.0.14-h3, there were a whole lot of "incomplete" sessions for TCP and a lot of UDP sessions with zero packets received.D...
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
| Subject | Likes |
|---|---|
| 7 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
