PA-440 firewall model name. I can't connect web interface and over console cable. Just power ligth on. STS and TMP ligths are off. what can I do with it.
hello I would like to add a new IP address to create a new GP portal/gateway the IP Address I have been given by the provider is not available to select as an IP Address I created a tunnel and configured an IP address but that has not solved the issue Q what has to be configured for the new public IP address to be selectable ? thank you
hello I have 2 x 440 series to configure for HA active/standby I plan to use ethernet 1/5 , 6 , 7 & 8 for the Data & Control links I have connected the interfaces to test when I select interfaces under "HA Communications" only the management interface is available in dropdown -- the other ethernet interfaces are not available as an op...
Hi Expert , I would like to know about intregate authen captive portal itself for identify byod of palo alto with clear pass the clear pass have pull information with ldap my question is below - Palo alto can connect just clear pass for authen ? with out directly connect ldap - how can deploy cert with client to avoid warning cert can us...
Hello, I am not a firewall administrator I am an analyst who reports alerts on suspicious behavior based on indicators of compromise matches, mostly related to ransomware and IP addresses with bad reputation. I have a big doubt because I always generate the alerts from the SIEM starting from the Action=allow field but I have noticed as you c...
Hello friends, I configured site-to-site vpn between two firewalls and the ping from network behind firewall (internal network) to other internal network is failed (timeout) while the traffic shows allowed in the firewall logs. The Tunnel is Up and Green status. The configuration is the same on both firewalls and straightforward. Policy allows...
I can get logged in to https://support.paloaltonetworks.com, but when I attempt to create a new case I get a Salesforce error: https://supportcases.paloaltonetworks.com/_nc_external/identity/saml/SamlErrorSingle Sign-On Error We can't log you in because of an issue with single sign-on. Contact your Salesforce admin for help. What do I do? I h...
Hi GuysAccording to document , if there's destination NAT , there'll be second routing lookup to decide outbound zone & interface. But I'm very confused when there's routing and PBF together, In the second routing lookup, how does PBF rule work? Does PBF work based on Pre-NAT destination address or Post-NAT destination address? According to ...
When opening iOS Facebook app I''m unable to play a movie... however, from the same device if I login to facbook via browser I can play the video.I'm trying to find out why the iOS App is getting blocked, as my policies clearly allow it.Rule iPhones: Iphone Rule allowing all traffic Log when using Facebook via Chrome Log when using Facebook v...
We are looking to utilize Cleaspass sending information to ours Palos for the purpose of user-id. We have this applied in some test groups but we are running into an issue where after a few days the connection appears to time out and the Palos stop received user-id information from Clearpass. There are no errors in the Palos system logs, Clear...
Hello, I'm searching for informations about environmental impact of NGFW. Is there a benchmark for the carbon footprint of Palo Alto physical firewalls?Measurements such as the footprint of the production of a firewall, daily electricity consumption? Thanks for your help.
Hi Question about configuring Panorama management interface. Why is there a "Public IP" under the management interface? "IF" we would set a public IP on the panorama, dont we configure it under IP Adress + Netmask + gateway? Why is there a "Public IP" option field first? I searched and read the guides but nothing about a public ip is spoke...
Hello, We receive many "DNS amplification attack response" alerts with the source of our internal DNS servers toward public DNS servers on the Internet. How can we know whether these alerts are not false positives and if they are true positive, how to find the main endpoint responsible for this type of attack? Thank you all 🙂
Dear Palo alto family, I face some difficulty to ping internet on DMZ , i am trying to configure a security policy DMZ_to_Public/ WAN but still i didn't ping 8.8.8.8 in DMZ switch and didn't ping in firewalls itself also. Help me to solve this issue pls
Raido_Rattameis
reaper
on:
VPN with two subnets
TomYoung
on:
Device Security license
reaper
on:
No proposal chosen ikev1
