How do you telnet from the PA firewall on port 500 to and external IP address?
Hi PA-Admins,we installed a VM-100 (version 6.0.2) in our ESXi environment. By accident we forgot to disable vmotion for the VM and the VM moves from one host to others...I thought vmotion is not supported but our VM-100 is still running and the licenses are valid.from the Virtualization_Admin_Guide_6.0: System Requirements and Limitations This ...
Assistance: my palo is not accessible. I n is happening more access to my palo, after having placed in demo for a client, only the power LED lights. I try dy by console access and management, but it did nothing.----------------------------------------------------------------------------------------------------------------------------je n est arr...
Hello,The group I use to authenticate GP connections doesn't work properly.I followed the advice on this thread: https://live.paloaltonetworks.com/thread/8661It was necessary to place the NETBIOS domain name in the LDAP server profile. Output from the CLI now clearly displays the logon format with domain\user, unlike before, for GP clients.The...
Hi all,Certificates, can anybody help?I have a cert syslog-ng.cert that ArcSight logger auto-generated and I want to import this on to the firewall as a "Certificate for Secure SYSLOG"It imports OK as Base64 encoded PEM format, with the option to import a private key disabled (if I choose this I need to give a Key File or a Passphrase...which I ...
hi I am planning to deploy Paloalto firewall in my network, but my biggest challenge is how to redirect web traffic towards Websense which I am using as a web content filtering engine.can any one one help me regarding this to how I can do so.Regards,Om@Spicejet
I'm new in using PaloAlto Firewall. We have to sites that have it's own dedicated ISP connections and I've been task to configure the PAN firewall to route the Internet connections to another ISP if the main internet connections encounter a connectivity problem.HQ1 RT1-------PAN FW--------Internet RTR------------------ISP1||| -> Connections ...
Hello,I noticed that when adding the Application MS-Lync and its dependencies, ports TCP 5065 & 49152-65535 are needed. In the Applipedia, it states TCP/Dynamic, but in order for this to work, I have to add these ports manually to the rule before this traffic is allowed. Shouldn't this be automatic or is this due to the fact that the ports a...
Hi All,I ran across a strange issue when provisioning a new Administrator on our team. The background is that we use Cisco ACS 5.1 as our RADIUS authentication for our PA firewalls. All of the correct VSAs are input and appropriate Authorization Policies created for Firewalls and Panorama. We do not use local accounts, and instead rely on ACS to...
We have several PAN 3020s at a client site with similar issues but for this, I’ll focus on a specific case. One pair in Active\Passive HA has 124 rules. We started noticing really slow RDP connect performance. (it would take 45 seconds to establish an RDP session to a target where the traffic was passed through the firewall). Out of the 124 rule...
Inbox | Palo Alto Networks Live Hello All, I have faced the similar kind of issue for panorama , one Job got stuck in 40% and we are not able to commit to the panorama. Also the management CPU was 100. Well after restart the management server the issue is resolved for clearing the job .but i took the PA support guy to clear the PID to redu...
Hi All,I have a problem with Panorama and devices log.Panorama informationmodel: Panoramaserial: xzy......sw-version: 5.1.0app-version: 445-2292app-release-date: unknownav-version: 1317-1787av-release-date: unknownthreat-version: 445-2292threat-release-date: unknownlogdb-version: 5.0.2My Device informationmodel: PA-3020sw-version: 5.0.8global-pr...
Hi Friends,Need Small help Please share the Migration Tool. I have but when try to run got some error.Thanks Satish
Hello guys,I have a issue about the IPsecVPN tunnel. One side of IPsecVPN tunnel is slow for receiving traffic but opposite side is OK to receiving traffic.flow_tunnel_activate 2 0 info flow tunnel Number of packets that triggerred tunnel activationflow_tunnel_decap_err 47373 0 d...
I am fairly new to custom signature in Palo Alto, just so you are warned. I am trying to create a vulnerability signature for detecting wordpress. The Get request will contain /? followed by 5 digits or more. User agent will be wordpress/ followed by version number. My plan was to create one signature with one condition for User-agent ( http-r...
PavelK
on:
Replacement of RMA
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 6 | |
| 4 | |
| 3 | |
| 3 | |
| 2 |
