We have a Palo Alto PA500 with several security rules. It seems okay, but the CEO asked that I'm sure the company is secure.So the question is, how can I test we are safe from the outside world?
Has anyone had a PA-3050 stop processing traffic? Our PA-3050 started dropping all traffic today (internet access, DMZ, etc.), we failed over to the standby unit and were able to restore service. Currently we have a support ticket opened but wanted to know if anyone here has had a similar experience. Thanks!
hello,is there a confirmed release date of PANOS 6.0.2? A month ago I had a case open, where the support guy has told me that the expected release date is arount the 21th of April. Today is the 24th and still nothingthanksRudolf
Hi,We use MDT to deploy new computers in our company and I have found that if I run the Global Protect agent using the silent switch the install finishes but no virtual adapter is created and the VPN does not work. If I remove the silent switch so the install pops up then click next all the way through it install correctly and creates the virtua...
Anyone familiar with a way to bypass captive portal for non-browser-based applications? Doing some testing with an eval unit from Palo alto and have configured agentless DC monitoring and using captive portal auth for a fallback. If a user hasn't already authenticated to captive portal it is blocking apps that go over port 80/443 such as ms-upda...
Hi,We have a couple of PA devices configured in HA mode. I just want to ask if it is normal that only the active firewall gets the URL filtering incremental updates. eg. FW-01 (active firewall) gets updated to version 2005.12.811 and FW-02 gets stuck to version 2005.12.000? Thanks,Nelson
HelloTask is simple, give access to 3 IP from Internet to camera on non-standart ports. Ports and local IP are: 192.168.220.251:554 -> x.x.x.x:554 192.168.220.251:80 -> x.x.x.x:8881 192.168.220.251:8554-8557 -> x.x.x.x:8554-8557where x.x.x.x is one of IP belongings for my PA and is used for NAT from this zone to untrust.I created secur...
Hello,I have a problem/doubt with the user-id and in particular with the identification of the local machine users.Internet access is only allowed for domain users and if the users enter in their computer with the domain account They don't have problems, but some times when the users enter with a local machine account the UIA installed in a ser...
HiFW can no update anti-virus signature.Please look at the following logs.admin@PA-3050> request anti-virus upgrade install file panup-all-antivirus-1278-1748.tgz Content install job enqueued with jobid 44admin@PA-3050> show jobs processed Enqueued ID Type Status Result Completed -------------------------...
Hello,There is a device with vwire between L3 devices using dynamic routing protocol(ospf or eigrp).I checked ospf or eigrp app-id in traffic log but there are only two ~ three logs for 2 hours.I think they are few logs.The communication between L3 devices has no problem.I just wonder it.In addition, I can not connect a device right now. I can d...
Dear all,I've configured my Palo Alto Cluster in a L3 Active / Active cluster setup.While I was trying to implement a NAT policy (Source Address Translation), it turns out that the only options that are working are: "0" and "1", as a reference to the member of the active/active cluster which should take care of the Address Translation.It turns o...
HiHas anyone experienced this problem and found a solution for it ?Some examples www.testbase.co.uk -- Pandb - religion -- clearly wrong Brightcloud - Reference and Research Training and Tools -- correct www. michaelwoodside.co.uk pandb -unknown clearly wrong Brightcloud -- Personal sites and Blog ...
Hi.allI Have a question about Network Monitor of App Scope.filter "Source / Top 10 User / Last 30 Days"When filtering application is normal.When I select source of data is not seen among the eight days. (Capture Attached)Also I was check the Network Monitor last night then April 24 ~ May 1 of data not visible. Today check the Network Monitor Ap...
I am getting this a lot. Anyone know what it means:EBL(Dyn Block Test) Refresh Aborted. Entry not refrenced by a ruleAnd the word is misspelled in the logs as well.
Hello. My situation is: - GlobalProtect VPN configurated -> user identification via GP then. - LDAP profile configurated -> authentication works well - Authentication profile configurated. - User Identification, Group Mapping configuration: - Group Objects: - Object Class: posixGroup - Group Name: cn - Group Mem...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |
