is there any documentation for setting up VPN on 4.1.6?I took a look but couldn't find anything recent.Thanks.
HelloI am running Captive portal successfully with HTML/POST based authentication. However as I only have a self signed certificate this generates a warning in the users browser.There is no requirement to encrypt the username/password submit to the portal in this implementation!How can I run the Captive Portal without encryption on port 80?Regar...
I ran the command 'show system statistics application' on the CLI of our PA-4020 at the Internet border and see these results....Virtual System: vsys1application sessions packets bytes-------------------------------- ---------- ------------ ------------facetime 36346 55150 367062117...
So, today, when basically nobody was on campus the PA-500 decided to lock up. I could not connect to it at all and it was not passing traffic through. Looking at the logs, it appears as though it locked up at 3:02 a.m. on Monday as there was no traffic in the log between 3:02 a.m. and when I rebooted it at 5:30 this evening.It does appear as t...
Hi Team,..Attached is the scenario for HA Active/Active,..Is it possible to configure IPSec and SSL VPN in this Scenario?The external interfaces of each PA firewall is directly connected to ISP routers and have configured defferent public IP's on both. And werequire single Gateway for all internal host..Thank you in Advance,.Gururaj
Hi,I've a basic setup with TWO vsys with separate vrouters on each vsys (Maketing and Sales ) and a shared Gateway. Some vpn Tunnels terminating on my shared gateway.I need to implement some static NAT rules for my VPN tunnels, so far so good.Routing 0.0.0.0/0 goes to the Shared gateway and of course other locally routes are routed locally by Vr...
Hi All,hoping you can help with something I'm now too sure about. I haven't found anything in help or knowledgepoint so far. I've pre-configure a couple of PA-200's in PPPoE mode (ISP modems in bridge mode) to send to a remote site OS. I've just had a response from their local ISP sayng that their DSL services will ONLY run PPPoA. I'm not fa...
Greetings!Today I received several helpdesk calls concerning yahoo! mail not working. Logs show that the 'yming.com' site that yahoo! uses is being flagged as a 'Phishing and Fraud' site.I know I can report it (24-48 hour fix) and can manually unblock, but what a pain. Is anyone else seeing this issue?
Hello,I have had a few instances where I've needed to allow certain files types through the data filter. One annoying case was native Office 2007/2010 documents that end in x. What I did was add it to my file blocking profile with the action of ALERT. This is now letting them in. Sometimes I actually have a FQDN or IPs that I can use to allo...
Are there any known issues to be aware of if I wanted to go from 4.0.9 to 4.1.6?We had an issue when we went from 4.0.9 to 4.0.11 where the dataplane on our PA-500 randomly rebooted several times and support's initial suggestion was to do a factory reset/restore of the box.I'd prefer not to do that if it's avoidable, so I figure there should be ...
Hello,I have 2 PaloAltos, one is running on robust and redundant Corp internet ISP, another one on a remote location with 2 public ADSL (and miserable quality ofc !). My goal is to have a redundant IPsec link between the two PaloAltos :How would you achieve this ? I have several scenarios in mind:PA2 builds 2 tunnels (one from each ISP) all tim...
Hey folks,User reported MSN mail being blocked as phishing-and-other-frauds, but my Hotmail and her other MSN email accounts work fine. I investigated and found that the server:sn123w.snt123.mail.live.comIs being categorized by the PAN device as phishing-and-other-frauds, but other MSN servers are not, like this one:co105w.col105.mail.live.comw...
Palo Alto seem to have the lowest arp/mac cache limits of any firewall I've ever come across.Are there any plans to increase the limits please?
HiBit of an advanced regex feature, but I would like to set up a custom vulnerability signature to detect browsers (user-agent) that are not Internet Explorer. True, one could detect Firefox specifically, but there are so many different browsers in the wild that it is impossible to match them all.The regex I'm attempting therefore is: User-Agent...
Hi,I am testing SSL decryption and it seems to work fine except when Http redirection is involved. E.g. when you try to connect to Https://gmail.com , google redirects you to https://www.google.com and it gives me a certificate error because of the hostname in the cert does (www.google.com in this case)not match with the hostname that you are c...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |
