Join us live for an in-depth look at the latest advancements in cybersecurity, best practices, tips and tricks, demos and
more to protect your business and defend against threats in real
What is the maximum limit on the number of lines to return? can it be increased?
I authenticated fine on the globalprotect portal but then I get this erro "globalprotect client could not connect to gateway. Please contact you IT administrator" Any ideas
Hello,
I want o start setting using Decryption Policy, to Decrypt & Intercept SSL (443) traffic from users when connecting to Internet.
I am wondering, can I use one of the well known Certificate Trusted, e.g., Global Sign by installing it on the Pal
...
I have IP spoofing protection enabled on PaloAlto but it is not effective due to the following reason:
My external Interface IP is 1.2.3.1/24 . The spoofed attacks are coming from a fictitious source IP for e.g. 1.2.3.25 destined to 1.2.3.50(web serv
...
I am unable to find the User group under user column in the Firewall Policy Tab and i see that the User Id agents are connected to the Firewall but when i do the same Search under the Group Inclusion List i see the Group in that Tab. I was wondering
...
I have seen for example on a small firewall when the customer enables SSL decryption that the counters for work groups "ecdhe_key_gen", "flow_host " etc. jump. This may show that the firewall can't handle the ssl decryption or that there is an SSL DD
...
Dear community,
We have a firewall with multi-vsys and the following scenario:
1 shared gateway and 1 public IP on external zone
1 virtual system and 1 private IP on internal zone
We configured DNAT to allow access to private IP from Internet followi
...
Hello,
I have configured a new Security Rule on top (#9 in the picture down) to Block traffic intended to a Custom URL configured in the profile Block_Files
* TOP RULE *
2 firewalls configured with HA active/passive, And enabled preempt on both of firewalls
Everythings find, can synchronize configuration and session
firewall-A is active-firewall with priority 100
firewall-B is passive-firewall with priority 120
HA timer
...
1. Most of the palo alto well known deamons have their own logs that can be reviewed:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLUeCAO
2. It is interesting that in the higher end Palo Alto platforms like PA-5000
...
Hi All,
What is the difference between last 24 hours and last calendar day time frame option that is being used in custom report settings.
Also last 24 hours time frame means past 24 hours data will be added to the report the minute report is run.
B
...
Apologies if this is a basic question but first time I do this maybe in a real production environment and I have no prior experience. Does anyone have an example of restoring Palo Alto in AWS (from a snapshot)? Where could things go wrong in the rest
...
Hello :),
I have a problem with VPN from PA-220 to Azure. The logs show this information : "IKEv2 IKE SA negotiation is started as initiator, non-rekey. Initiated SA "
Every change I made it always is this same error. Is there any way to resolve this
...
Hi,
Do we have any list of critical and high severity system logs? Like what are the examples of hardware failures, serious issues etc...
Hi Team,
I'm seeing configuration invalid when I remove user-id agent from palo alto firewall and not able to commit.
PA-220 PANOS version 8.0.3. Same model firewall I have removed I can able to commit.
Only in this firewall, I'm seeing this issue.
...
on:
DNSSEC broken for updates.paloaltonetworks.com
on:
PBF Issue
on:
compatibility
