Is the Palo Alto Firewall also affected by this vulnerability?http://tinyurl.com/bpf9odlKind regards Marc
Hi Team,For Site to Site VPN in System logs showing ( description contains 'IKE phase-1 SA is deleted SA: 10.10.10.1[500]-10.10.10.2[500] cookie:eb16a2088724d32c:0000000000000000.' )Thank you in advance,.
hi,i installed pan5020 my customer..customer have 8 branch offices with metro ethernet..but some web page cannot open from branchoffices like www.yahoo.com, www.microsoft.com,etc.(i examine rule and logs everythigs looks normal, its interesting)when i switch to old firewall(cisco asa) everything running normal.i tried increase session time-out, ...
Hi Guys,right now we are trying to setuop a ipsec vpn between out palo alto 4.0.7 box and a cisco asa 8.2 box ..Cause we are running into troubles whithin the ike setup, i would like to know the following:1. How can i debug the vpn setup in the pa ? I'm used to ASA's but this is my first vpn setup on a PA. I want to check why the tunnel does not...
We are testing Certificate Based Auth + User Based Auth for iOS VPN. Is it best practice to export a unique Identity(Client) Certificate for each user/device? Or is it common to use the same Identity Certificate for everyone? Security wise, it would be better to use unique certificates, but managing them may be hassle. We are also looking into...
Dear all, we are trying to protect a JBOSS web server against a server default configuration vulnerability. This is described at. http://www.articlesbase.com/security-articles/exploitation-and-remediation-of-jboss-application-server-default-configuration-vulnerability-1889469.htmlHow can Palo Alto protect servers against this kind of vulnerabili...
PA2020.Exporting logs using ftp seems extremely slow. We are talking about speeds around 30 KB/s, this on a full GB network to a ftp server with fast storage. Logs are big (easily over 10GB) so it would take days to export them.How can I speed things up ? Is there an alternative (like: using the usb port on the device ?
Our business has a Facebook page but as a policy we have Facebook blocked as a whole.Is it possible to unblock certain pages in Facebook only (eg. www.facebook.com/mybusiness) but maintain deny access to every other page?
I have been trying to use the application filter functionality as I am setting up our PA with little luck. Example being: I would like to allow pretty much everything under "business" systems", "office programs".First problem I am running into is it does not include the dependcies. OK I can get around that and create an applicatio group for t...
Has anyone seen the following and found a solution?I have a BGP peer setup with an export policy permitting only specific prefixes. If I modify this policy, to allow an additional prefix, then when I am commiting the change, the firewall completely ignores the policy for about 30s, and then starts withdrawing the prefixes that are not allowed. ...
Hi Guys,I was wondering if there was a way to send the Alarm messages on the firewall to a syslog. For example an alarm like "Current size (39047 MB) of traffic log database exceeds alarm threshold value (90%) of total allowed size (39037 MB)".Is there any way I can have that sent to a syslog server. I have threats being sent to my syslog serv...
HiI've got an interesting question regarding mobile devices based on iOS or Android (maybe also Symbian and/or Blackberry OS to a much lesser extent). I searched the forums but haven't found anything posted that ask the the following questions:1) How does an administrator ensure that apps downloaded via the app stores (i.e iStore or Adroid marke...
We have an AD account for which we restrict all Internet access via a user-based security rule. The account is an auto-logon account for certain kiosk-type machines in our environment. I'm finding that the username being used on the machine is not always recognized by PA, and as a result Internet traffic is being allowed. There are other times w...
hi ,i just got a request from a custoer on how to block mp3.. so as currently PanOS doesnt detect it , can we add it as a signature ?BR
Hi.Firewall was working as a incorrect date. Logs were saved in incorrect date during set the incorrect date. If I open the report, it shows incorrect date as a default. I think if I delete reports which saved in incorrect date, it might be able to show reports as current date as a default.i was attached a screenshot for help you understand.Plea...
PavelK
on:
handle (username) change?
PavelK
on:
Replacement of RMA
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 3 | |
| 2 | |
| 2 |
