Hello,I am getting the following error when trying to commit and am not sure where to look. Error: Need to config WMI account and password for querying Microsoft directory serversThanks in advance.Bob
It is possible to debug ESP packet's in Wireshark but to do so I will need to obtain the encryption key and the authentication key for the given VPN from my Palo Alto 5050. As an example - In Linux it's possible to get this information by running the command 'ip xfrm state':gw205:/ # ip xfrm statesrc 192.168.140.200 dst 192.168.140.205 proto es...
What is the recommended way to connect a PA box to a windows domain?I see know there is a radius way of doing it, and i know this is the way other like to configure it.But there is alot more work configuring, and reconfiguring if i want to change/add any groups or access.Is there a reason we should not use Kerberos or LDAP?
I have had my PA 3020 in line for about 4 months. Can anyone suggest a report to run that we give me a good over all idea of how well the firewall is working?
Anyone got some information regarding a threat filter release for CVE-2014-0160 a.k.a Heartbleed bug in OpenSSL?
creating security policy to allow specif users to use applications web-browsing and SSL with destination any with using SSL decryption policy which decrypt all.after this policy there is implicit deny .the issue that palo alto cant` detect youtube application , monitoring shows that is web-browsing is permitted and falsh is denied !!!!how i can...
hello.... Can a User-ID Agent connect to more than one firewall?if so, how do you set up the other ones?
After implementing HA Active/Active, we left S2S VPN tunnels alone. Ultimately no changes to IKE Gateways. The S2S terminate to a /30 address that is statically routed from the ISP to ethernet1/12 on the active-primary. Tunnel interfaces and their routes are identical on both primary and secondary, IKE Gateways are NOT synced as this is just ...
Hi,I have Palo Alto 3020/5020 firewalls and I would like to configure a port channel (ether channel) between these devices and a Cisco switch.I have configured an aggregate link on the Palo and added the interfaces. I have created the Port Channel on my Cisco but I am not seeing the AE interface coming up.Has anyone got a guide on how this can b...
I created a rule for URL and tick the enforce safe search. When it enabled, if I want to do the google search, I have to log in my account and pick lock safe search. Otherwise, it will block me. I think it is hard to use in my case, which is a school and have lots of students around 5-6 years. it is too hard for them to do register a google ac...
I created a rule for URL and tick the enforce safe search. When it enabled, if I want to do the google search, I have to log in my account and pick lock safe search. Otherwise, it will block me. I think it is hard to use in my case, which is a school and have lots of students around 5-6 years. it is too hard for them to do register a google ac...
I received a PA-200 device for review and testing. I like to set it up besides my current firewall and see what it can filter.Via SPAN Monitor on a Cisco switch I copy all traffic on the UNTRUST side to the PA-200. Now I get a lot of tcp-reject-non-syn drops.What is the correct way to configure the PA-200 to listen to all traffic on the UNTRUST ...
Hi,I have setup my device management to use the public ip. it's working fine but i want the management to be done using a different port. currently its using https(443). how can i configure this?Please help.Thank you.
Hi, colleagues!I have a "Custom URL Category" and I try to add new URL from API request but if URL have ampersand(&) I have a error: <response status="error" code="18"><msg><line>Malformed Request</line></msg></response>PanOS: 5.0.8Original URL: example.com/proxy/index.php?hl=1111101001&q=789My API req...
I am using agentless syslog integration for user ID and it's working but for every login event I am seeing twice as many log messages received as auth success log messages and I want to know why. Is there a way to look at the logs received by the PA?>show user server-monitor state exi UDP Syslog Listener Service is enabled SSL ...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |
