hello all,
I'm a PA noob who has recently just transitioned to a team that has a pretty heavy backlog. sorting through it, I see another team has requested that we remove local admin accounts from our firewalls. to my knowledge, the only local account
...
Hey team,
The site is showing in cryptocurrency and getting blocked (https://www.tradingview.com/).
As the checked site is showing under 3 categories and we do not want to allow cryptocurrency.
As a workaround, we added the site into the custom categor
...
Hi,
We've just 'merged' policies for 2 set of devices in a same Device group and would like to rename Device Group to indicate the list of devices. For example :
Original :
Device Group AU - au-pa01, au-pa02 (active/passive)
Device Group NZ - na-pa01,
...
Hello,
I wanted to deploy a virtual test environment with panorama and a cluster.
Does anyone know if it is possible to get trial licenses for a few days to be able to include devices in panorama?
Regards
Does anyone know if the these pa-220 issues with pan os 10.x are planned to be addressed?
Upgrading a PA-220 firewall takes up to an hour or more.
PA-220 firewalls are experiencing slower web interface and CLI performance times.
Also, is the Palo recom
...
I am using Expedition v. 1.2.4.2. Trying to add a PA-440, but this model is not available from the list.
Does that mean I cannot use Expedition for my migration?
In November we upgrade to 10.1.3 and this error could not get resolved with TAC so we reverted back. We just upgraded to 10.1.4 and we are getting the same errors as before:
deviceconfig -> setting -> session -> dhcp-bcast-session-on unexpected here
d
When i set our URL filter to block category 'web advertisements' it works as expected. However, it also blocks many of the results of Google and Bing searches. I understand that is because the results in question are web advertisements, strictly spea
...
Hi,
We enabled "Host internal detection" because user in company complanining about GP was taking the cursor. After configurin "Internal host detection" the GP stop taking the cursor but there are some users which its necessary to "Refresh connectio
...
We understand DoS protection works when we set action Protect.
We need to know the benefits to setting action Allow and Deny.
Because we think that option is the same as normal security policy.
Thank you.
Dear All,
We have deployed a PA3220 firewall. Please let me know a command that I can use to check how much utilized from allocated quota for traffic log and I know I can use >show system logdb-quota to check retention date. I am looking a for a comm
...
I need to create 800 IP address and Address group into Panorama. May I know what is the CLI command able to help me to do it ?
I have tried below command but return as invalid.
set device-group D-DMZ address H-xx.xx.xx.xx ip-netmask xx.xx.xx.xx
U
I have installed TS Agent v10.0.0 software (x64 bit) on a Windows server in a Citrix environment. I have also configured on the Firewall the IP address of the TS Agent Server,
I have allowed the firewall policies to grant access from Firewall to TS
...
I have an issue I was hoping to get some feedback on. I manage 27 different Palos and also Panorama. I have one FW that stops responding to the 2FA setup with TACACS+. All the devices are the same configs and all running 10.1.2 code. A simple reb
...
We're upgrading a VPN tunnel to IKEv2 between a Cisco FTD 2140 and a PA-850 running 9.1. What I've noticed is that the PA doesn't have an option for PRF on phase 1. Does the PA automatically make this the same as the integrity algorithm? Is there so
...
BPry
on:
When logging into the community can I turn off the email a code?
BPry
on:
Cortex XDR: How to block execution of some unwanted apps
OtakarKlier
on:
Inquiries about PBF nexthop settings when the ISP is a DHCP Client
OtakarKlier
on:
Understanding URL Filtering security profiles vs Rule Action
OtakarKlier
on:
Qualys scanner blocked
OtakarKlier
on:
Split-tunnel not working properly
