Hi all, Please I need to configure paloalto PA-500 to send report using a gmail account. please can someone help me.Best Regrads,
So, I have just implemented SSL Decryption in our environment and we hit a website that appears to not work properly because of it. (It's sap.com, click on the login link in the upper right.) We don't see any errors in the firewall but the login prompt doesn't come up for us.The question is, is there any way for me to whitelist *.sap.com from SS...
Given a flow and properly written policy to allow Facebook and its myriad apps/widgets on port 80/443, other than the admin management overhead (i.e., having to open ports 80 and 443), how is what Palo Alto does different from what Checkpoint does?This question addresses the quote below (found on the link shown).http://researchcenter.paloaltonet...
Hi Everyone,I am looking for help to identify the best way to see if my firewall is dropping traffic because it cannot keep up with the amount of traffic going through the interface. I want to make sure my firewall can keep up with the amount of traffic going through it. Also, I am looking for any other ways to determine if my firewall is not ...
Hi,Just wondering if any Palo Alto versions are affected by this bug in OpenSSL?http://heartbleed.com/Regards
For all the various log types (config, system, threat, traffic, HIP) what is the default syslog format?All the fields are available to edit in when creating a custom log, but it would be useful to have the default format defined for reference.
I'm thinking about trying something a little out of the square with user-id and captive portal. Let me start with the context and business goal:The PAN is deployed as a data centre firewall.I'd like to use some policies that permit clients access to an application only if the user is known.I'd like to use some policies that permit clients access...
Hi All,I'm migrating from ASA to Palo Alto including user VPN access (AnyConnect). The setup will be 2 factor authentication with LDAP/Kerberos (not sure which yet) for the portal and OTP via RADIUS for the gateway.The current setup allows access lists to be applied via the vpn policy to each authenticated user group limiting their access to in...
Hi Everyone,I have a client that is migrating to Palo Alto firewalls. I'll be implementing Global Protect SSL VPN replacing the existing Cisco Anyconnect.The client utilizes DeepNet 2-factor authentication for SSL VPN. I was wondering if anyone had any experience implementing RADIUS authentication with DeepNet?Do VSAs need to be setup on the D...
Is there a way to create an application group that will dynamically add applications as they are updated?For example, I want to create a P2P application group that gets denied. Can I create a filter that says any application that is classified as P2P with a risk of 4 or 5 should be automatically added to the group? And as updates are made to the...
Given a flow and properly written policy to allow Facebook and its myriad apps/widgets on port 80/443, other than the admin management overhead (i.e., having to open ports 80 and 443), how is what Palo Alto does different from what Checkpoint does?This question addresses the quote below (found on the link shown).http://researchcenter.paloaltonet...
GP v2.0.1. Successful authentication is based on a particular AD user group. If the user is not part of the group, he/she would be able to connect. We want to implement this solution for smart devices.. however, how can we control who connects and who doesn't? we don't want a user with a personal device to be able to connect to the portal/ga...
HelloToday I observed that when I try to logon to my PA200 I got error "Connecting to Management Server failed", when I try to logon by SSH "System initializing; please wait...."After few minuts a was able to logon by browser and putty.In system logs :PA200 wasn't much loaded, after this self-acting restart there was some high load:Restart on 04...
Here's what we need to accomplish:We have subnets on our networks that need to use our external DNS server (they are Guest VLANs for our WiFi networks). This traffic is visible by our paloalto firewall with layer 3 adresses (10.XXX.30.0/23). When we access internet with these clients we have no issue at all but when these clients try to access o...
I am currently running a pair of Cisco ASA 5520 in HA. I want to protect the traffic going inside with an inline wire on the inside interface of Cisco ASA HA/pair as it travels to the LAN. A pair PA-2020 are configured in Active/Standby with the wire trust/untrust pairs running inline after the ASA HA pair. Untrust zone going to the ASA and ...
OtakarKlier
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
OtakarKlier
on:
Network wifi Management
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 7 | |
| 7 | |
| 6 | |
| 4 | |
| 2 |
