Hello Live, I was wondering which certificate athority network administrators choose to buy their certifcates from. I am currently using a self signed certificate distributed via GP for the SSL decryption feature. I am hoping to replace this self signed certificated with one from a trusted CA. Will this type of certificate work for decryption? I...
HA Condition - Link Monitor Recovery - Time to retake Active Link Monitor role Hello Community, how is everything going, I hope it's going well. I have the following questions regarding HA. Details of the environment. Active - Passive A/PPrincipal PA - PA-52XX-01-HA - Priority 50Secondary PA - PA-52XX-02-HA - Priority 100Preemtive activeLi...
Need sync help. About two months ago we noticed our passive 3250 would slowly not respond. It finally died, no console response. Opened ticket, had one RMA, powered it up. Imported the saved config we took before it died. Checked ip's, management setting, etc and wired it up. Configs not in sync, expecting that. Sync to peer from active to passi...
Hello, Is it possible to have crowdstrike falcon agent installed on the paloalto vm machine
Hi All, We are trying to download the "Panorama an device config bundle (config-bundle)" using API. Seems API for the same is not available. Also with device-stage getting "device parameter needed" error. Can someone help us with the solution or suggest any alternate method to meet the requirement. Tried with below URL:https://{firewall-ip}/ap...
How Do I Enable Third-Party IDP For My Account?. (i.e. 3rd party IDP - CyberArk) in am not able to see Authentication in setting page is super-admin same as super-user .
Fuel User Group is hosting a virtual Spark User Summit on May 23: AI in the Age of Cybersecurity. This special event, from 9:30 until 11 a.m. PT on Thursday, May 23, is dedicated to AI. Join cybersecurity experts and Fuel members from around the world for an insightful virtual session with Rob Rachwald —Director of Product Marketing, Palo Alto...
The errors that occur after upgrading the equipment are as follows Current OS: 10.2.7-h3 We tried to input the region value through the command, but the value was not output.
Hello, We have USER-ID setup to get our wifi logs and that is working well for most of our devices however we have an issue where the iPads will initally get a connection but then after timeout period set in User Identification Timeout they remain connected without a username and therefore will have no access. The ipads never drop wifi even wh...
Hi All,My goal is to set up a daily backup of Panorama/Firewall Configs. Regarding config backups, does anyone know if the OS matters? For example, the SCP/FTP server is UNIX vs Windows where the logs are stored?I also understand only Panorama can do this. How would I do this with all firewalls? The article below states that "Panorama saves a ba...
Hello Guys, Im having a problem with EDL, some while ago a pop up start appearing when creating or opening an External Dynamic list, suggesting that append an ending token when using domains, i try to append a token "/" without the quotes obviously, but when i configure ex: google.com/ this entry is invalid and not shows on the list the EDL is...
After upgrading PA-220 from 9.1.18 to 10.2.x previously "healthy" Tunnel and Path monitors for VPN tunnels were up and down, constantly re-keying on the remote end. We managed to solve the re-keying issue (only IPSec was a problem, not the IKE), and removed one of the monitoring solutions - tunnel monitoring as requested by PA TAC, with only P...
Team, Below Advisory mentioned that openssh 7.9 is affected with few vulnerabilities and on upgrade to 8.1.13 will resolve it.https://security.paloaltonetworks.com/PAN-SA-2020-0002 but below pan os open source listing mentioned as openssh version is 6.4 is used. So can you please confirm whether update is required and whether updat...
We currently have version 6.1.4-711 of Global Protect deployed for the establishment of VPN sessions for teleworking users against our perimeter PAN FW. Panos is 10.2.8-h3 We have a group of users (a small part of the total) to whom Global Protect indicates that they do not have an internet connection (when they do) and their communication with ...
