Hello, Anyone have successfully block scanning from shodan.io? www.shodan.io ? It looks like Checkpoint has written specific signature to block shodan scanning, http://blog.checkpoint.com/2016/01/04/check-point-threat-alert-shodan/ -E
Hi. I want Delete Shared Objects in Panorama Pusht to Panorama ↓↓↓↓ Equipment A and B do not have their addresses registered in the shared policy. It keeps bringing up addresses and service information from other firewalls. I want to delete the shared policy without using the push changes made function. The panorama software versi...
Hi, Customer want to renew PANDB URL filtering subscription for PA-220 (PAN-PA-220-URL4-3YR-R). I aware that this SKU has been discontinued. For this case, is it directly renew to advanced URL filtering (PAN-PA-220-ADVURL-3YR-R)?
Greeting all, I recently experience GP VPN disconnecting after installing Windows Update kb5037771 for win11 laptop where it totally cannot sign-in at all. Kindly advise is this something can be done on firewall level or on client machine to fix this issue Thank you
Hi, For NFR bundle license, I see the description as below: "PA-1420, NFR bundle subscription (Advanced Threat prevention, Advanced DNS, Advanced URL filtering, GlobalProtect, Advanced WildFire, SD-WAN, Standard support), 1 year (12 months) term." Just to confirm, is it the bundle license already include support as well? So in case custome...
We are trying to push device group configuration to the managed firewalls but validation itself failing. It throws the error as application status -> rockwell-factorytalk-viewpoint 'rockwell-factorytalk-viewpoint' is already in use. Anyone experience the similar issue? Any suggestions and help are highly appreciated
I have a problem, I'm setting the user ID group mapping, I can pull users, but not groups, I see 0 groups, I restarted the service, no luck, I verified all server monitoring is connected, and traffic is going to DC'd, the PAN-OS is 10.1.5, I have a similar setup in a pair of firewalls that are on pan-os 9.1.13 with no issues, any advice that po...
Hi there! I have a little problem with GlobalProtect and I don't know how to solve it..I use Ubuntu 18.04Each command to globalprotect (for example globalprotect help OR globalprotect connect) returns the answer:Cannot connect to local gpd service.I tried to restart gpd service (sudo systemctl restart gpd), it didn't helpCommand systemctl stat...
hi,I would like to forward an email notification for specific alerts, ONLY to the person to whom the incident was assigned to.I don't see any subtype option to the Distribution List. Has anyone found a solution to achieve this ? (slack messaging is not an option) thank you
I'm working on a project to upgrade 2 x PA-3020s each with their own configuration into an HA pair of PA-1420s and am having trouble with Expedition. I've tried importing the devices using the API key and also by exporting the running-config.xml file as a superuser and manually importing it into Expedition. Both are giving the same results. My "...
Hello Team, I have configured a RADIUS connection with FortiAuthenticator to implement multi-factor authentication (MFA). Within FortiAuthenticator, I created two user groups: an ADMIN group and a USER group. My objective is to set security policies on our Palo Alto firewall using these Group IDs. Despite configuring the RADIUS attribute (user...
What is the advantage of using a loopback interface for a global protect VPN?
Does Palo Alto allow having the Local IKE interface in "default" virtual router and the Tunnel interface in different virtual router when setting up site-to-site ipsec tunnels ? The use case of this to achieve multitenancy and overcome situations when different customers ( with overlapping lan subnets) connecting to a Hosted Enviromnet .
Hi All, I have an issue with setting up a BGP Establish connection. On my side is a PA firewall connected to the a ISP with BGP session. The first time, the ISP side sent only the default route to PA, and there was no problem in the BGP session. And now we require the full routing table that involves 4000+ routes sent to us. And I do a Max-pre...
Hi all, We are using a Panorama VM with a local managed collector. When I try to customize how to use the assigned space, Collector Group -> General -> Log Storage and I introduce more than 90% for detailed firewall logs, red square indicates that value introduced is incorrect. Our Panorama VM version is 10.1.12 and there are free space ...
