Hello,Does anyone know if it is there any limitation about storage for logs on Panorama Virtual Appliance?Thank you in advance for your answers,Ainara.
Hi,I have panoram installed and configured. I have my PA FW that is now sending traffic logs and system logs, and threat logs to the Panorama.1. How can I configure PA FW to send URL logs to the Panorama ?? as I do not see any url logs in the panoram from the PA FW ?2. Panoram is now reading the current logs, how can I export the existing 1 mont...
Hi folks.I have a situation with site-to-site VPN's on my Palo Alto's which I could use some help diagnosing.I have a number of remote teleworkers who have a company-provided Cisco 887 router, which is used to run a site-to-site, IPSEC VPN to link into our internal network.This works fine in 99% of cases, but there's always one with an issue.One...
Hi.Iam Raju.. Iam a beginner to palo alto networks...I have a small issue working with QoS... Can someone please help me...I have attached the configuration of my Device..Please have a look at it... the issue is device is not showing the QoS Statistics...ThanksRaju
Hello all,We recently flattened our lab firewall and configured it as a tap firewall. It currently has only one security policy which is an allow all policy. The firewall currently has one zone and the only other non-standard default config is a handful of custom applications and application overrides.What I did was set a filter in the traffic l...
Hello.We have been having challenges blocking the downloading of Postal-Receipt.exe and Postal-Receipt.zip being pulled down from web-based email. The emails convince the user to click on a link similar to http://goodguy.com/wp-content/plugins/akismet/mirror.php?receipt=798_1534586700 causing the encapsulated exe to come down. The bad guys are...
Hi,I'm about to deploy two PA-5060s in HA, and I am configuring everything from Panorama. When it comes to the Group Mapping on Panorama, the UI is different than it is on the firewalls.On Panorama:On the firewall:Any input is appreciated.Thanks,Alex
On our user TAP interface (a TAP that collects user trafic only), we see 1000's of TCP flood events from 0.0.0.0 to 0.0.0.0 ; port 0 to port 0; Zone user to Zone user. It is always Session ID of 0. I have tried to do packet captures, but I never seem to get anything. It also doesn't show in session browser (probably because the session is 0!) An...
HiI did a search on the forums for multiple IP's and found a lot of posts talking about how the Palo deals with multiple external IP's - i.e. if your ISP assigns you a /29 block and you need to NAT multiple application into your network. So basically you pick one IP, load that on the Palo interface and then just do NAT. Palo will ARP for any add...
Hey All; When setting up GP and other external interfaces for access I found that any NAT inbound is not accessible when in the local network as well, only from outside. Can anyone explain if there is a NAT or GP gateway setting that will take internal users to the outside IP without failing. It is much easier to test setting up the firewalls...
So I am wondering if there is any way to use the VMWare workstation (I know the VM-100 is for ESXi) as the gateway on your host and if anyone has had success with just monitoring EAST-WEST traffic from the VM-100 on ESXi?
Does anyone have a rough formula for calculating the performance of multiple VSYS instances on the same appliance?
Our threat monitor shows a lot of ZeroAccess.Gen Command and Control traffic, type spyware. The default threat action is to alert. I want to either block or drop. What is the best way to block traffic for a specific threat signature but to use defaults on all others with the same severity? The threat signature categorizes zeroaccess.gen, id ...
Can a PA500 support netflow version 5 - I know it does v9 - but my collector needs v5. Thanks.
Dears,I am working on a migration from Check Point to Palo Alto. We used that PA Migration Tool for CP rules into PA.The main problem is all CP rules are based on services and we want to transform them into PA applications... BUT, the PA apps tool (applipedia) doesnt show the apps by ports...SOmetimes is hard to uderstand the name of PA applicat...
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
| Subject | Likes |
|---|---|
| 7 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
