users in one the gateway facing the error `please click the button below to relaunch authentication` while try to connect VPN .
We are currently redistributing all OSPF routes to our BGP neighbor without any filtering. We wish to exclude certain prefixes from BGP advertisement. I need an assistance in configuring the filter for this purpose. Q1. Is it going to be working if I create redistribution profile and apply noRedist_To_BGP profile to BGP-->Redist Rules? Q2...
Hi, I was reading about the integration of Palo Alto GP with Azure SAML authentication. My globalprotect is using port 4433 to access instead of the default 443. Hence, I'm wondering what to configure for the identifier, a reply URL, and a sign-on URL in Azure SSO. Below is how I should set it up in my Azure? So instead of the default 443, i w...
Hi Team, We have added the file execution for Quickassist in restriction in XDR console but we dont want to get flooded with the alerts that are getting generated due to it. Is there any way that I could get restrict the file execution but also suppress the resulting alerts simultaneously? Regards Rohita
HelloGoogle authenticator has been deleted on the phone of a user with super user privileges and cannot log in to sso.paloaltonetworks.com.What method should we use to solve the problem?Thanks
hey i am gtting commit fail on phase1 abort, and it looks like the SSL VPN proccess how can i troubleshoot it ? show management-clientsClient PRI State Progress-------------------------------------------------------------------------routed 30 P1-abort 0ha_agent 25 P1-abort 0device 20 P1-abort 0ikemgr 10 P1-abort 0keymgr 10 init 0 (op cmds only)...
Hello, I have a firewall rule on the Internet Firewall list this Source: Palo Alto Networks - High risk IP addresses - Palo Alto Networks - Known malicious IP addresses Destination Any Service Any Action: drop So if an ip inside the two EDL try to reach a Public Customer Service will be drop right? How is this list updated? There is a packag...
I have several EDLs that were intentional configured to not use a certificate profile. Is there a work around to hide the Panorama warning messages stating "External Dynamic List <edl> is configured with no certificate profile. Please select a certificate profile for performing server certificate validation".
THis was working in vwire just fine with two vwires.1/1 to 1/3 vwire 11/5 to 1/6 vwire 2Now we want to go to Layer 2, here is the configuration. I am only adding L2 sub interfaces to the firewall. 1st trunk: --CISCO SW1 TRUNKED INTERFACE ALLOWING ONLY VLAN 9 >> FW >> SW3 CISCO TRUNKED INTERFACE ALLOWING ONLY VLAN 9.--FW VLAN 9 tagge...
hi Community, Is there any way to downgrade the Cortex Agent from 8.3 to 8.2 via Console and as we cannot turn off Auto Upgrade isn't autoupgrade conflict with Downgrade
Is there a way (CLI or WebUI) to export the URL Filtering objects and their details? We are looking to export the objects and their block/allow categories so we can put them in front of management.
Good afternoon team:Could you support me on how is the HA version upgrade process?First the passive fw? then the active one? Greetings. #paloaltoHA #update
Hi everyone, I'm excited to join the Palo Alto community! My name is Abhi, and I'm eager to learn and grow my career in cybersecurity with Palo Alto Networks. I currently hold AWS certifications and have a good foundation in networking. However, I'm unsure which Palo Alto certification best fits my background and career aspirations. I'd greatly ...
Hello everyone. I'm stuck in a bit of an odd situation here with my two PA-850 firewalls unable to sync between each other. Initially both firewalls were on PANOS 9.1.7. Fully syched and configuration backed up. The problem occurred because I upgraded the secondary-standby unit all the way to 10.1.6-H6 and then had to rollback to 9.1.7.The...
Dual isp when primary tunnel goes down secondary tunnel should get up. but physically when i remove cable from interface in the firewall tunnel not going down. it is like branch office to head office connectivity.
PavelK
on:
Replacement of RMA
