Hi All,What is reverse route injection is used for in Cisco or any other devices? How this can be accomplished in PaloAlto?Thank you,Gururaj
we recently integrated a PA-500 (4.1.10) into PANO 6.0 and we've started seeing OSPF flapping. Has anyone else experienced this issue? It looks like the Management cpu will spike up to 100% when communicating to the PANO and then we lose OSPF. This PA-500 has been in production for over a year with no issues. Is there a good way to look a CPU hi...
Is there anyone out there running client VPN and managing it through the portal on PAN-OS 6.0.1? I keep getting the error stating that I need a portal license. I have the same setup on another Palo on version 5.0.8 and it is running without a license just fine. Tom
Is it possible to setup Global Protect to use Windows AD authentication for a subset of our VPN users, and Radius for the rest? I'm assuming this is not possible since you can only set one Authentication Profile under the GlobalProtectPortal, but if there's a way to accomplish this I would love some input.Thank you.David
When I'm committing changes to my PA-4020 I'm seeing this error message:Error: Profile compiler : can not set time attribute on tid 40026 interval 60 threshold 20(Module: device)Configuration committed successfullyThis started happening a few days ago. I'm running 5.0.11. Any ideas how I can troubleshoot this?Thanks,Dan
Has anyone noticed the Mcafee Application Object is using the wrong ports, or do I have something wrong?McAfee update protocol for distribution of signature/pattern updates. tcp/3025Mcafee-update tcp/8801These are all the ports Mcafee leverages (outside of backup updates)https://kc.mcafee.com/corporate/index?page=content&id=KB66797
Is it recommended to upgrade to PAN-OS 6.0.0?, Is it stable?
Can anyone please help me categorized the below URL into Malware Siteshttp://203.197.123.30/clm/clmhomePlease advise.
Hi,in my opinion some commands are still missing in the PanOS CLI. I miss some features implemented in my conventional firewall to handle the policy rule set efficiently. Some other vendor has the possibility to use so called op-scripts in the CLI. This scripts allow to implement own CLI commands using the built in API. Is there already the pos...
Hey everyone,I have been bashing my head onug how I can cleaninly use the USer-ID agent.. I wanted to stop WMI or event exclude internal vlans as I thoht it was used just for VPN. But its not its used to map source user info in the log files of the firewalls...Thing is when I have it enabled it probes everything! Gateways, iPhones, S4's ipads, e...
Is it possible to configure GlobalProtect to display a login banner?
Does anyone know if the Spamhaus format drop lists (that use ";" delimiters to denote descriptive text) are accepted as PA Dynamic Block lists?http://www.spamhaus.org/drop/drop.txtRgds
hi!i was wondering what is the time frame for the user agent to "discover" newly added users or security groups, in an LDAP environment?if such a timer exists - is it configurable?can the agent be forced to update its database?thnx!
I need some clarification on this great head start on Dynamic Block List format:Working with External Block List (EBL) Formats and LimitationsI note that a few lists seem ready to use without re-formatting like:http://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txtIs it safe to assume that the comments preceded by the pound sign and the...
Hello,I have one question and I hope somebody will help me.Does PaloAlto has a recommendation for failover link latency. For example I have firewall cluster and this cluster is done across wide area. What max latency should be used for properly functionality between cluster members. For example cisco says that failover link latency should be l...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 2 | |
| 2 | |
| 2 |
