Hi All,Any one have Idea which anti-virus,anti-spam ,URL filtering identify / control ........??... (how much) + applications and how to calculate which model support how many users.Thanks Satish
Hi all,Hopefully a fairly straight forward beginner question. If I'm wanting to securely set up a basic inbound rule to direct traffic to a web service in our DMZ (from a single external source address), is it best to specify the source address in the NAT or Security policy - or both? I'm trying to figure out the pro's and con's for both scena...
I am trying to create a vpn tunnel betetween a ASA 5505 and PA 3020 and it keeps giving me IKEv2 error but I don't even have that enabled. What is the best way to do this type of VPN tunnel?
We're looking to pick up a new firewall, but we're not sure what Threat Prevention Throughput is and if it could be a potential network bottleneck. We're looking at the PA-500 and we have a 100 Mbps link now, but if we bump up our line speed, will the TPT be a problem later?So two questions:1. What is Threat Prevention Throughput?2. Can it be a ...
Toying around with it and it will redistribute any other route, but not ::/0. It also doesn't honor the "Reject Default Route" flag.6.0.2, PA5050
Is there a way to copy security profiles and custom sigs from one PAN device to another? We have 3 PAN devices (one PA2020 and 2 PA500's) and don't want to recreate the profiles/sigs using the GUI on each device whenever we make a change.Perhaps this can be done at the command line or via config file xml parsing?Are we stuck having to pay $10k f...
Ok so I'd really like to skip the part about why my organization does this and get to the part about what should I be concerned about... Our PA is set up to block many many many URL's using URL Filtering, just as you'd expect any org to do, but there have also been many Data Filtering regex signatures created solely to block URLs as well. Often...
I have mail notifications enabled for high and critical system logs. Because of this, I receive the following mail multiple times a day:SYSTEM ALERT : high : Syslog connection established to server['AF_INET.10.0.0.49:514.']domain: 1receive_time: 2013/11/07 14:01:28serial: 00xxxxxxxxxxseqno: 14814actionflags: 0x0type: SYSTEMsubtype: syslogconfig_...
Hello,I have successfully configured a captive portal with NTLM authentication for User-ID and users are successfully authenticating using NTLM, but right after that they are stuck in a redirect loop on the following page:User Authentication in ProcessThe original web page you requested will load when the authentication process completes. Click ...
Hi, im having problems connecting with VPN-SSL clients (Global Protect and SonicWALL VPN Client). We have a firewall Palo Alto to go to internet and i use these VPN clients for connecting to several branches but i dont know why my Palo Alto (which VPNs go through) is having a strange behaviour. I dont see any connection in the MONITOR TRAFFIC ab...
Hello,I want to restrict bandwidth on interface e1/2 with 20 Mb I have created QOS Profile with wireless and applied that on interface e1/2.Enclosed are the snapshots for your reference. Please advise that it who to test this profile.Thank you.
Hello PAN Community,I would just like to know if its possible to edit or change the default action for a specific suspicious DNS query?We have a situation here where what we wanted to happen is to drop all the packets for suspicious DNS query instead of resetting both connection.Thank you in advance.Regards,Hartkently
What basic steps have to be complete to allow a remote user to enter an ip address in their browser and get the ssl vpn authentication screen? We currently get an eventual timeout when we try to connect from a browser. We followed the basic GlobalProtect setup steps, but, just wondering if there is something 'dumb' that we are missing.Thanks!
Today I tried to configure our PA500 firewall to make a server from our DMZ zone available for Office 365. But first I will explain our network topology.In our company we have 2 internet lines, one for internet and the other one as backup. After this backup line we have several public IP adresses, so I want to use these IP adressen for publishin...
Hi,I've recently seen this a couple of times on completely separate firewalls / AD infrastructures (a 2050 cluster and a 3020 cluster, both running 5.0.8). User ID is setup and working fine along with LDAP group mappingHowever on the odd occasion users report applications or URL categories blocked that should be allowed. It often "goes away" aga...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |
