Dear Team , We have a customer, who found SSL/TLS Vulnerabilities on audit SSL/TLS configuration The firewall supports weak cipher mode CBC. kindly provide the solution to remediate the weakness. snip attached for Refr.
We have a lsvpn architecture and we are having problems with one of the satellites connecting with lsvpn gateway. We configured and maintaining this lsvpn for the past 1 year and dealt with most of the problems. Usual one being credential cookie expiration and we had to manually go in and put in the credentials. Other one is sometimes we have to...
Since the update from our firewalls to 10.1.10h2, i see in the system logs the event : Type: device telemetry Event: config-reload-failure Description: Failed to reload config files. The sent of the telemetry files is working. This happens every time after a commit from panorama to the firewalls. The firewalls are HA setup managed by panorama. I...
Hello community, On my paloalto 850 I get several alarms every day stating: "Current suz (xxxMB) of traffic log database exceeds alarm threshold value (100%) of total allowed size (xxxMB). On the CLI a "show system disk-space" shows the disk on not full: Filesystem Size Used Avail Use% Mounted on/dev/root 9.5G 3.4G 5.6G 38% ...
I am installing a PA 440 v 10.1 I can ping IP Addresses on the Internet using my internet interface as source I can https inbound to the firewall after configuring a management profile under Device -> dynamic update or license check my attempt at the connection times out Q can anyone recommend tests for me to complete to troubleshoot ...
I was configure remote 10 branchs connect to Office by IPSEC tunnel. Each branch connect to Office bandwidth 256kbps,512kbps, 1mbps. So someone branchs tunnel automatic disconnect. Manual remote tunnel device(Cisco RV042) reconnect to PA2020 error. See error messageIKE phase-1 negotiation is failed as initiator, main mode. Failed SA: office ip...
Hello, We've set up a dual leased line configuration with BT, featuring two separate gateways. Our primary aim is to ensure continuous connectivity, should one of the lines fail. Our PA 220's static routing has been configured as follows: - For BT1, we've assigned Ethernet interface 4 with a default route (0.0.0.0/0) having an administrative dis...
Is it possible to disable the login banner only for CLI access to the Firewall? (SSH)
Hi All, I am researching between GRE and LSVPN tunnel for a HUB and Spoke design, basically for ISE authentication traffic from Meraki wireless to HUB ISE. But i can't seem to find any document stating which one is fit for this purpose or what are the differences. GRE seems easy to deploy but less secure. What would be the benefit of using L...
Hi everyone, Been receiving alerts for a little bit around tmpfs /dev/shm being at 99% - how should we clean up this directory? What is this directory used for?tmpfs /dev/shm Thanks!
I have been looking at the best approach to push a rule to multiple sites, but using a different value for the source address object at each site. For example, allow http from the users subnet to the internet, and the users subnet is different for each site. It looks like a single rule can be created and pushed to all the sites, then the val...
Hi, where can i find the 'feature request' list I've got an answer for an opened ticket : "We verified FR in response to your request. Please find the Request ID below:FR ID: CXDR-I-1843"
Hello Team, I am running into an issue with our setup. We have single PA460 box connected to 2 ISPs same time, i.e. Ethernet1/3 is to ISP1 and Ethernet1/4 to ISP2. We are running 2 default routes setup like this with ECMP enabled, so traffic is been load-balanced betwen 2 ISPs with a hash based on source. We also have 'strict source path' opti...
How can i search the Registry entries in cortex XDR in the query builder Sample registry HKCU\Software\Microsoft\Windows\CurrentVersion
Hi all ,lately i did a palo alto implementation at a customer's sitei installed the user agent 10.0.0-30 for windows server , adjusted the ports on the agent and on palo altoenabled user id on the internal zone in the connected devices tab on user agent the PAN device keeps flashing (appearing and disappearing)and the user id agent is shown as d...
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
reaper
on:
Server monitering -Connection refused
PavelK
on:
Commit Failed
