What is used to convert Netscreen config to be imported into PaloAlto?
Heylo.. any chance of having the PAN firewall (not Panorama) do automatic backup of configurations as per time/date settings?I am now having customers asking me if PAN have this somewhere down the line being implemented on the firewall.Cheers..Kalyan
I am trying to get my PA to talk to an LDAP server. I set up the LDAP server as described in the documentation User Identification Tech Note - PANOS 4.1.pdf) but it never is able to connect. I get this error:ldap cfg mydomain failed to connect to server (10.10.10.10:389), source 10.10.252.4.Now 10.10.252.4 is configured as my Management interf...
I'm hoping that someone from PAN Support or Development can answer this question. I have been fighting with this for weeks now and have narrow the problem down to the GP Portal service.ScenarioI have a PA-200 in my lab with two Layer3 interfaces defined. The Internal L3 interface has a Static IP for the local network, while the other L3 interf...
I just upgraded from 4.0.7 to 4.1.6. Since this upgrade our monitoring server in the LAN 10.x.x.x/24 can not browse to our web servers in the DMZ 192.168.X.X/24. It shows up as, action blocked-url, with Category of private-ip-addresses. I have private-ip-addresses blocked in the URL filtering but I have a custom URL category defined that allows...
I am trying to make the Enterasys/PaloAlto integration from this doc work:Running 4.1.6 code on the PA-4020 and the associated UserID agent on a single server. I followed the directions exactly but see no evidence info is making it to the UserID agent.Is this compatible with the latest UserID agent? Support directed me back to the community/de...
Hi PAN,When is that the PA-500 will have an ARP cache limit of 1000? I was promised during the launch of version 4.1 that the ARP cache limit had been increased to 1000 from 500 just to realise that it never happened. I am desperately waiting for something on this as clients are not at all happy with this and having a work around just to avoid...
Should I expect any issues if I rename a VSYS? I assume it should rename all VSYS names in the config where applicable?
Hello,This is not very clear on Palo box, since months we have issue that everyweek we have alarm indicating that the log was exceeded 80 of the quota, infact we want to log all traffics and don’t want to disable logging on somerules, I monitored during the week the logdb-quota and Palo don’t clear/purgeor delete older log at 80%, we opened a ca...
I have don't extensive testing and discovered that if a GlobalProtect Portal interface is addressed via DHCP it does not respond to HTTPS requests. It only responds if the Portal interface has a Static IP Address.Can someone please help with why?
I am currently setting up a DMZ using a class C address range provided by my ISP. So far I have an untagged interface built connected to a switch and a VR built. Example:I have the subnet 10.10.10.0/24I set interface G1/2 with address 10.10.10.1/24I have a VR with a route 10.10.10.0/24 destination int G1/2 next hop address 10.10.10.1I have a lap...
Hello,I have a squid proxy in the internal network, which does the user authentication against the active directory.Now I would like to see the username in the logfiles of the PA firewall.I do not want to use the username for authentication on the PA just to visulize, who is initiating this webtraffic.Something simular to x-forward-for, not usin...
I have this same issue at two separate clients. I installed the agent under elevated priveledges but once it is installed an I open it, I cannot click on any of the menu options. If I click on Restart Server, it says "query service fails with error5".Did I skip a step or am I missing something? I have the regular user ID agent setup just fine at...
Hi,I just want to know that there is anyone have the same experience ?My customer's device was running PANOS 4.0.10, using Captive Portal, and working normal.But, in the recent days, their PCs was updating then they could not open the Captive Portal page normal.I cannot find any strange event or log in System Logs, Counters, or other records.Ple...
I am curious what the recommended link speed settings for the various ports. The external port has to be hard speedcoded to 100/full as that is required by the ISP. The internal connection is to a gig core switch at auto detect (1000/full).Should the internal connection be set to 100/full to match the external?Thanks,Bob
| Subject | Likes |
|---|---|
| 7 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
