To know free course Palo Alto like fortinet nse 1 2 & 3
Hello,Since this morning I'm not able to commit any change from my panorama to my firewallsHere is the message error that I receive:Details:. Management server failed to send phase 1 to client logrcvr. Management server failed to send phase 1 abort to client logrcvr. Commit failedI tried some debug command like "debug software restart log-receiv...
I can run Dynamic Updates, but am unable to perform a GP download. "Getting Failed to download due to server error. Please try again later."This is for a passive node in an HA setup. It is a new PAN and this is keeping me from having it go live. Is there a way to download the GP package from the running PAN and upload it to the passive one?PA...
Global protect Always On - External connections Hello LIVE community! I hope you are well. I have had to configure Global Protect on several occasions but I have a question that I am being asked in this case: Is it possible in S.O windows to use the Always On, filtering that only connects to GP when it detects the connection i...
Hey guys,I'm trying to block Google Drive. I've tried a variety of things: URL Filtering for online-storage (which works for Dropbox, icloud etc). But Google Drive still works...I researched and found quite a few forum posts on the topic and see that decryption is most likely required in order to see the traffic in order to block it. Is there a ...
We have a VM-100 running 9.0.3.xfr to do some testing. This is currently setup on AWS, and we are trying to support traffic for multiple public web server's being sent through the firewall. There are the three standard zones and network interfaces (Untrusted, Trusted, and Management). The Untrusted has a public IP (Elastic IP) and internal su...
Hello all, I can't see any firewalls or device groups to choose from when setting up a scheduled config push in Panorama. I have attached a screenshot and also a screenshot of my device groups! Yes I know the screenshot is of templates, they are both empty! Very odd - Thanks - Geoff
We have two account numbers. For some reason, AIOps wouldn't activate in the "old" account number where all my firewalls are. Cortex XDR is on the other "newer" account number. The SE suggested we move everything from the old to the new account number. Problem is, we have different teams and need to limite some asset access. So, according to...
Hi all We have installed 10.2 version of UIA in new win 2019 server as our 2012 server would be shutdown soon. The problem is after configuring all the required permissions the agent status overall is connected, but on all our ADs listed in UIA, the status is stuck at connecting and after sometimes we get Access is Denied status as well. The s...
Dear Team, I recently backed up and restored the configuration of the existing Palo Alto firewall to a new model. My question is: how do I compare the configuration on a new firewall and my existing device, or does PA have any useful tools for the comparison? Thanks!
New 1410 appliance running v11.0 -> 11.0.2-h2. Fully licensed, latest content update installed yet no AV updates are available and the following message appears in system logs (in both .0 and h2): Retrieving Content 'Antivirus' info failed with error 'Virus updates are available but you must first update threat content'. We suspect this w...
Hey all, I've got 2 PA-440s at a customer in an Active-Passive HA Cluster. These firewalls have replaced the older PA-220s that were previously present. Traffic and everything flows as intended and all of the firewall rules are also working as intended. The issue that I'm running into is that part of the GUI works. The first 3 tabs (Dashboar...
Hi All, Within PAN-OS (10.1.x) Using GP, I want to setup one HIP object to match for multiple OS versions for instance Windows 10 and upwards. But does not seem to be doable instead i can only select each version within a specific OS range. I want to avoid having to create an object for each version of Windows10 and 11 and wondering if there is ...
Hello, may it be possible to use explicit proxy feature in PAN-OS 11.0 with no authentication and allow access for all users? The documentation is very limited in this area and describes SAML or Kerberos authentication only. Thanks Lumir
Dear Team, I hope all of you are doing well. I have some CVE IDs from my Tie 1 firewall, which is Check Point. I have checked all of those CVEs in the Palo Alto firewall, and most of them weren't available. Could someone explain or advise me on the reason? Best Regards!
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
