Palo Alto seem to have the lowest arp/mac cache limits of any firewall I've ever come across.Are there any plans to increase the limits please?
HiBit of an advanced regex feature, but I would like to set up a custom vulnerability signature to detect browsers (user-agent) that are not Internet Explorer. True, one could detect Firefox specifically, but there are so many different browsers in the wild that it is impossible to match them all.The regex I'm attempting therefore is: User-Agent...
Hi,I am testing SSL decryption and it seems to work fine except when Http redirection is involved. E.g. when you try to connect to Https://gmail.com , google redirects you to https://www.google.com and it gives me a certificate error because of the hostname in the cert does (www.google.com in this case)not match with the hostname that you are c...
Hi GUys ,I`m deploying a PAN.Everything is OK , COnfiguration , URL Alerts , AV , AS everything on ALERT MODE.But my problem , after COnfigure a L3 INterface to receive IP via dhcp client from my ISP router , my connection with internet becomes very slow!I think the problem is on the PAN because when i rollback to my PF SENSE everything works go...
Is this specified anywhere?I can't seem to find where the antivirus update schedule is stated explictly.Or is it just part of the weekly content updates?
Hi,Can anyone tell me if HA Active/Active on a PA-500 requires three links in total? As there are limited ports on the PA-500 this may cause an issue.Also, if this the case - is there any option on having an IPSEC VPN terminating on the passive firewall in an Active/Passive HA configuration (i suspect the answer to this is no).Andrew
Hello,We have an Extranet server which sits on our DMZ... http and https are allowed through the firewall so that outside users can access the web app on that server. My server admin asked me if I can block all inbound traffic from China and Taiwan as he gets a ton of hack attempts coming from those countries. Our web app doesn't serve anybody...
Hello,I would like to know if user-ID agent 4.1.4 works with PAN OS 4.0.11 ?RegardsMathieu
I am curious as to what blogs, RSS feeeds and/or forums others follow regarding security/corporate level firewalls/etc.Side note: Unless I am missing something, the RSS feeds in PA support don't work.Thanks,Bob
Hi,Heres my case: Machine A and B was working in HA mode.Meanwhile their antivirus and threat licenses expired and we didnt renewed them. Both machines has valid and up-to-date URL filtering license.Machine B went dead after some power problems and no longer worked anymore.We replaced it with machine C. Registered Machine C on paloalto and insta...
Hello,Basically the scenario is that we have one exchange server behind the firewall, external users are accessing this server usning a host name mapped by a service provider to two different Public IP's using DNS round robin,Is it possible to configure two NATing rules for the same single host (the server). This way what ever IP the host name i...
Very strange problemHi,have paloalto PA-500.I have three internet providers.I have many branch offices (40).my case4.1.0 softwarefrom all branch office we ping WAN1, WAN2, WAN3 is OKthe weekend I did upgrade the software to version 4.1.3from all branch office we ping WAN1 is OKfrom 30% of the branch office is ok ping WAN2from 70% of the branch o...
We run our NetMotion connections through the PAN for our mobile clients. The troubled moblle application receives dispatch information from our CAD application and since switching to the PAN from our previous firewall the delivery of this information has become unreliable.We suspect that not seeing any traffic across the link, the PAN shuts dow...
All,I apologize if this has been asked before but I couldn't find anything related to my specific question. I am a newbie when it comes to firewalls in general. We are going to be migrating from ISA to the PA firewall shortly and I have a question about public IP's assigned to the outside(untrust) interface. On the ISA we "attach" all the pub...
Hi AllI want to set snmp traps to my snmp-server , are there any recommend about that ?I have got the snmp mip from paloalto support site, but there are too many descrpitions about trap, so maybe someone can give me some recommends about system health of snmptrap.ThanksJoy
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |
