General Topics

How does Expanse know about my website?

I have the following message in the User Agent field of my Apache log: Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers&#39; presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com"...

Reminder to Register / Log In to Make the Most of LIVEcommunity!

LIVEcommunity is thrilled to share a new feature: a reminder to log in or register to get the best community experience possible! If you’re not logged in, you will notice a new prompt in the upper right corner of our site, guiding you to sign in or register to join our community. By registering, you'll unlock a world of benefits, incl...

Resolved! FIPS-CC Mode Initial Setup

We are now required to switch to FIPS-CC mode for compliance. I have read the Admin Guide section about switching the operation mode to FIPS-CC but have a question about a FIPS security function. The guide states that I can save my current running-config since this change will revert the FW back to factory defaults and all configs will be lost b...

Set a new GlobalProtect VPN portal to prisma for 1000+ devices

Hi, I've been asked to roll out a new VPN portal and automatically switch users over to it in a phased approach. I don't think this is possible via Palo Alto (as it will set it for all users immediately) and Group Policy has some limitations around phased approaches so we are using SCCM. I have a script which i am testing but getting mixed resul...

Ubuntu_OpenLDAP with PAN-OS User id

Hi All, Is there any document which will show how to configure Ubuntu based OpenLADP as a user id agent with Palo Alto firewalls. How to add the LDAP server into Server monitoring profile.

Resolved! EOS PAN-OS 10.0.12-h5

How is the EOS (End of Support) for PAN-OS 10.0.12-h5, which was released on January 8, 2024?

Resolved! Vip(DNAT not working)

This is my topology. From 30.0.0.10 i would like to access the server 192.168.0.2 with the help of PA wan interface IP(30.0.0.1)I have created DNAT and Ssecurity policy . Object Prenat IP is 30.0.0.1/8 and Webserver Ip is 192.168.0.2/24, when I try to open 30.0.0.1 from my web browser I am not able to see server's web page. I took a captur...

Resolved! New To Palo Alto, Best Way To Get Started and Learn?

If it helps, we use something called Panorama 10.2 which I am now in charge of so looking for how best to learn this? So best way to learning the world of Palo Alto firewall administration. let me know

Resolved! Refund for Palo alto NGFW purchased on AWS

We have been trying to reach Palo Alto branch of refund. We have tried all the contact information for refund. They are not answering to both email and phone calls. We have removed the palo alto stack If anyone knows how we can contact Palo Alto for refund please let us know. Warm regards,

SIP Invites timing out for certain calls

Hi all, I've have a sip voice issue for a few weeks that I am a bit lost on. For a bit of background, we have a cloud phone system we just moved over to around a month ago. A cloud phone system links up to Webex softphone for our call center to receive calls. If someone dials our main phone line it will start in the cloud PBX but then send the...

ECMP, interface, zone and security policy question

Hi guys I am quite new to Palo Alto NGFW. We have on-prem PA-32xx on 11.0.3. I am having trouble with static route ECMP for redundant IPSEC tunnels to AWS. Previous guy configure both tunnel in different zone (lets say AWS1 zone and AWS2 zone) and then configure bunch of PBFs. Then when the return path is changed, traffic will get dropped and I ...

Port forwarding

Hi, I need same help with port forwarding (Im new in this) I want to forward external port 5078 from static public IP address to port 5060 on local IP address 192.168.168.200 If possible help step by step thank you very much Best Danijel

Resolved! Device Administrators

Hello, Can a "Device Administrator" unlock users in "Authentication Profile"? Don't want to give user "Super User" unless there is no other choice. Thanks Rich

User-id Agent Windows defender firewall issue

We have the PA User-ID agent installed and configured on a Windows 2019 DC. The problem arises when I enable the "Domain Networks" defender firewall the agent losses the connection to the PA firewall under "Connected devices" in the agent view. Disable the "Domain Networks" defender firewall and all is working fine. I have added the PA User-...

Resolved! ECMP Strict Source Path

Hello. In ECMP settings there is Strict Source Path option to enable. But I can't find any descriptin about this option anywhere. Anyone knows what exactly does this option do?

Discussions

How does Expanse know about my website?