Hi,Is it possible to run a previously defined custom report from the command line?brmario;
Hi,All my URL profil is config with ALERT instead of allow. So i log any URL block or accept.But the problem is im not able to ALERT if i unblock or block a category under policies TAB name "URL Category".I have no choice, my rules are set in this way. I have a default URL profil that give access to most of the category.But i have some sepcifi...
This question has been asked in a couple of different ways without a definitive answer that I can find.My challenge is that we have an external engagement space where designers (internal and external) collaborate on projects. Users thin client into the environment and do their work with data and information going into the secure environment wher...
Hi,Is it possible to display the timestamp of the last login on the logon screen (both in captive portal and at the globalconnect remote client)?I think this is a nice assurance for the user to actually check that noone has used his account since his own last login.It is probably technically challinging, but I want to discuss the possibility and...
Why is it when I have a HA pair with an identical link failure on both devices (same monitors configured), the device with the higher 'device priority' value (least preferred) becomes the Primary device?When a pair of devices has the same failure the device with the lowest priority (most preferred) should be the primary.It seems to end up on the...
Hi everyone,Just have some queries on Palo Alto firewalls posting some questions. Help on these is much appreciated. what does the following command do > show neighbour all Does this function like Cisco discovery protocol to identify the peer CISCO devices or for OSPF neighbour or some other purpose?2. how to see interface physical and adm...
PA500 and syslog? What IP (or interface) is sourced from the PA to a syslog server? Is it a management interface? If you have multiple assigned management interfaces, which one?Thanks.
As with most things GlobalProtect I am having issues with a customer and am finding it difficult to find out why.I guess the first question is do you need to use client certificates in order to use SSO with global protect?The issue the customer has is although he has checked single sign on in the portal config he still has to enter his username ...
Is there a simple way to prevent unauthenticated users from accessing the internet from the inside?It is my understanding that you cannot negate AD Groups? True?I was hoping to create a policy like this that would deny any unauthenticated users from accessing the internet.Zone Address User ...
Hello All.I use PA-5050 , PANOS-4.0.9 , 10G InterfacesDMZ zone has FTP Server. It work for file download service to Internet.FTP data traffics are very slow (about 50KByte/s).But the device is working "commit" that FTP data traffics are fast(about 10MB/s)And FTP data traffic are slow again after commit 10 minute.I had checked Interface count on...
I am playing around with a new PA200 we recently purchased. I am interested in learning more about he new User-ID functionality that is built into firmware version 5.0+. Is there any documentation, white papers, etc. that I could use to try and get this setup? Everything I have found seems to be fairly dated. Any help would be appreciated.Thanks!
I connect to the VPN (NetConnect). I get all my ipconfig correctly. I can ping anywhere in the network.If I bring up an MMC I can add an RDP snap-in and RDP to machines.However, the AD, DNS, DHCP snap-ins cannot connect to our servers.Checked the firewalls on the servers.The tunnel terminates into the same zone as the servers.Mysterious....
GroupI have a student in one of my classes who asked what scanning techniques do we have, surrounding the AV security profiles that we apply.Apple File Protocol is not one of the 6 precanned decoders that we apply in our AV scanner.How does/would Palo Alto scan for viruses that could be transmitted using AFP (Apple Filing Protocol)Thank you.Steve
Hello,DHCP server is enabled on PA for some customers.It works fine BUT it creates a lot of entry in the sytem logs.( receive_time leq '2013/02/06 11:49:27' ) and ( subtype eq dhcp ) and ( severity eq informational ) and ( eventid eq lease-start ) and ( description contains 'DHCP lease started ip 192.168.99.13 --> mac 68:96:7b:36:2d:8d, inter...
I have attached pictures of my current Global Protect setup. Now we have had a request to allow IPAD's, and Android tablets on to the VPN. Can I have multiple profiles? One for our Domain laptops and one for tablets? I see from the documentation that the tablets will need a Root Certificate from the PAN. If I create a Root Certificate for the ta...
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |
