Hi, I need same help with port forwarding (Im new in this) I want to forward external port 5078 from static public IP address to port 5060 on local IP address 192.168.168.200 If possible help step by step thank you very much Best Danijel
Hello, Can a "Device Administrator" unlock users in "Authentication Profile"? Don't want to give user "Super User" unless there is no other choice. Thanks Rich
We have the PA User-ID agent installed and configured on a Windows 2019 DC. The problem arises when I enable the "Domain Networks" defender firewall the agent losses the connection to the PA firewall under "Connected devices" in the agent view. Disable the "Domain Networks" defender firewall and all is working fine. I have added the PA User-...
Hello. In ECMP settings there is Strict Source Path option to enable. But I can't find any descriptin about this option anywhere. Anyone knows what exactly does this option do?
I received a replacement firewall from another and when I tried to put it into operation this message appeared, .( "[1K Welcome to the Maintenance Recovery Tool[mATTENTION: A critical error has been detected preventing proper boot[68Dup of the device. Please contact Palo Alto Networks to resolve this[67Dissue.r support@paloaltonetworks...
I'm not sure where to turn from here but my organization is trying to do a configuration we haven't set up before related to our student self-service system. To try and summarize the issue, we have a guest-wireless zone that we need to allow anybody access to another server that is internal on our production network. Our system architect regi...
I'm moving from a Cisco ASA to a Palo Alto firewall for the first time. I've imported the config to Expedition and am prepping it for import to the firewall, but I noticed only the first of my crypto peers for each tunnel was imported to an IKE gateway. After some research it seems I'm going to need a separate IKE gateway for each remote peer as...
Hello, I write a basic python code for 'contains' filtering in in rule name search. And I want to share with community also community can give an advice for me. The code: """"""""""""""""""""""" def generate_output(numbers) : output_strings = [] for number in numbers: output_strings.append("(name contains 'Rule " + str(num...
Hey team hope someone can help me. I am pretty new to Palo and I am trying to setup Global Protect PreLogon in our corporate environment. I have managed to get it all working in the lab (awesome) now doing that in the live environment is different ball game... Issue is that I am getting asymmetric routing, our default route goes out via another...
Hi All, We need to setup a specific user group in Radius should only access the GP. No other users should access GP. Currently authentication method set for GP is Radius and in the same radius we need a specific group of users only to authenticate. May i know how i can acheive this please? Do i need to setup something like Data Redistribution se...
Confirming the Upgrade Path - Currently version 10.2.3-h2 upgrade to 11.0.2-h3 1. Download 11.0 2. Download and install 11.0.2-h3 Am I correct? do I need to reboot twice for this OS upgrade? NGFW
Hello everyone, I'm having trouble configuring palo alto with a Radius NPS server. Basically we do not want to use chap protocols to avoid enabling reversible password. So we wanted to use EAP-TLS but it does not seem compatible with Palo Alto. Then after some research we noticed that palo alto recommended to enable PAP protocol here https://kno...
So, I'd like to accomplish the following: Client A on the Internet needs to access port 80 on server B. Server B resides behind the PA FW in the trust zone. The untrust zone consists of only one interface with a DHCP configured L3 interface. This IP is expected to change from time to time. What I have configured is the following: a) A NAT ...
Hi Team, We want to configure ipsec site to site tunnel between two locations as per below details 1) Location A having single ISP address i.e Wan address (1.1.1.1/30) will connect to location B having 2 ISP address (2.2.2.1/30 & 3.3.3.1/30) and form a IPsec site to site tunnel. Is it possible for doing the Same ?. If yes how my traff...
We are having a problem in our PA cluster. One of the firewalls is restarted and HA is activated. This problem occurs approximately every 3 weeks and the error I found is from Wifclient and according to the paloalto documentation the workaround is to disable the IoT services. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g00...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
