Firmware upgrade from 11.1.6-h3 to 11.2.10-h3 Please help to send guildline step by step to upgrade. Thanks. Do we need to upgrade the base version 11.2.0 first before going to 11.2.10-h3 ?
Hi there, We are looking to migrate a Cisco ASA 5545 with two contexts (Internet and LAN) to a PA-1420. We don't have a multi-vsys license, so everything needs to be merged into a single vsys. We’ll be managing the PA locally (no Panorama) and using the Expedition tool for the migration. Is it possible to merge both ASA contexts into one vsys?...
Dear Members, Am here a new member, please I wish to know how to allow only the google play store for a specific networks with android devices.If I try to add only google base/play application, other traffics also blocked.Let me know how to allow google play store . Regards, Tiago Marques
Hello All . Been wrestling with this for a week . My starting point is to only allow connections to the entra joined domain for e,g, fred.onmicrosoft.com . The rational is DLP - if I go to my browser and attempt to logon to another enterprise - dave.onmicrosoft.com it is blocked. This is not consumer BTW - home tenants are blocked with t...
Hi, To restrict access to specified Microsoft 365 tenant (allow company M365 tenant only), I have tired to follow below link for configuration. Using HTTP Header Insertion For Sanctioned Access To Office365 ... - Knowledge Base - Palo Alto Networks But it's didn't work. Users still available to logon with personal M365 account. Since URL i...
We have the Trend Micro agent installed on the endpoints, and it is running smoothly. However, the application is still being identified as "ssl", even though the packet captures show the correct SNI value in the Client Hello. In the Server Hello, both the SAN and CN fields contain multiple wildcard entries ending with *.trendmicro.com. The URL...
Hello, We have 3 branch sites and we want to deploy a virtual ION device within our Azure tenant to connect it like another branch site. 1 - Is that possible? I see PA ION devices within Azure to deploy but I am not sure if it will accomplish what we want it to do. 2 - (If we can do 1) Is there any documentation on best practice setup for ...
I am setting up backup user-id agent 8.1.10-2 on Windows 2016 Standard server.I have given all the required access to the user-id agent admin account but its not working / refusing to start.I am using the same credential on existing UID agent 7.0.8-13 running on Windows 2008 R2 and it runs fine. I attaching error messgae when starting UID servic...
Hi Team, I got 5 devices which are experiencing Shared Pool Memory Allocation failure at the same time displaying by a SIEM. So , I already shared the potential cause of the issue as you can see below : The sslmgr daemon attempted to perform an action (certificate validation) before completing its initialization.This typically occurs when:The ...
Is there any way to set a static Management interface IP with PanOS 12.1 in Azure VM? There are no options in the GUI, just a show DHCP client information window. From the CLI, a static IP/GW/DNS can be set in the config and commits without error, but it does not apply to the interface. Any attempt to "set deviceconfig system type static" result...
HiHow to activate Precision AI network security bundle for my 400 series firewall?Previously I was using core bundle since 2024. For this renewal, my partner provided Precision AI bundle. I have already received the auth code, but I’m unable to activate it on both the firewall and CSP portal.The error message is showing “use email link” or fail ...
I have VM-100 running panos-11.1.13. currently i have local admins for msp -superusers and 1 customer user with a customer -admin-role profile. customer wants to have mutiple admins controlled by their radius. so radius profile and auth profile is configured. how can i attach admin user group(listed under auth profile) to admin role profile. I s...
I would like to ask whether DoS Protection detection can be configured in TAP mode. Since this is TAP mode, I understand that traffic cannot be controlled or blocked. However, what I want is simply to detect whether there are any internal DoS attacks. I have confirmed that TAP mode is included under Zone Protection. However, it is still not clea...
I've read through a dozen questions and the scores of answers to those questions, and I'm finding a mix of outdated information, bad information or just unrelated options... I suspect this is going to send down a rabbit hole, so I'll try to compartmentalize based on my testing. I never progressed far enough to get close to a resolution. So, ...
Hi everyone, I’m curious about XDR’s capability to detect AI agent runtime activity. My understanding is that XDR is quite effective at identifying post-incident artifacts, C2 IPs, and similar indicators. is it also possible to detect AI agent runtime behavior?
