Could someone help me from which PAN-OS version can we do Concurrent Policy installation ? For example : Admin A and Admin B can push 2 different Access Policy to 2 different Clusters ?
Hi Guys quick question.. planning a pair of PA 5420's in HA - the plan was for each to have a 40gb QSFP+ module. however on our secondary core switch we are unable to source a 40gb sfp in time. So.. as a temp solution, will HA work if we have a 40GB QSFP+ module on FW1 connecting to 40GB sfp on Core1 and a 10GB SFP on the FW2 connecting to 10g...
Hi Someone know if there is a way to remove the domain name from the group mapping The reason why is because i get from external source on palo alto the user id test1 or "test2" or "test3" Goal is create a policy rule base on the source user that is being part of a domain group In my case LDAP group mapping get this information: show u...
Hello everyone! Just have an issue that I can't seem to figure out. In our threat logs, we are noticing that the source address shows the default gateway address rather than a specified address. We will get a specific address, however more often then not, we see the default gateway address. Any idea how we would be able to consistently see...
Would anyone have any idea why the portal would show Renewal Confirmed but the dashboard does not seem to be updating? Do I need to wait? Still not showing updated:
Hi Support, We want to get top all users for last 30 days using XML API, how we get it? This is XML API to get top 10 users (Worked😞 <type><panorama-trsum><sortby>sessions</sortby><group-by>srcuser</group-by><aggregate-by><member>src</member><member>app</member></aggregat...
Hello to all, I would like to know how smart PAN admins would solve this problem: suppose you have to allow inbound traffic from a source address that is: - defined as a FQDN but you know from DNS that it is delivered via a CDN like cloudflare, akamai, etc or - defined as a domain with a wildcard, for example *.letsencrypt.org I know that: - I...
Hi, Please advise if anyone face issue fail dynamic update for version 8786-8435. There are no any update for this and no error in paninstaller_content showed. I saw disk for pan config is only 33%. Anyone know what we can check more? Schedule update everyday 10PM SGT but last update is 2021/09/01. there are internet connection on firewall.
Hi All,Where can I find Visio Stencils / icons for Palo Alto devices?Regards,SOC
We recently had this issue where after upgrading firewalls to 10.1 the panorama gave a error on push to certain firewalls with description "none" which wasn't very helpful. On further process eliminating we discovered it was only VM FW's in AWS the error occurred on. Panorama wouldn't even try to push the device templates or give any meaningfu...
Hi Guys! May someone help me with this - Is there capability with Palo Alto FWs to enable some sort of network access control for both wirelss and wired to control devices on our network? The goal is to be able to prevent non-company devices from connecting to our network.I don't think there is, but want to make sure. Much appreciated!
I'm not sure how much it's been publicized, but there's a pretty significant improvement to how Palo is letting customers handle newly released APP-IDs or application shifts. Thus far when new app-ids are released customers just have to accept them without really understanding if the coming change will effect existing security policy. Well fi...
While trying to export the Named Configuration , the configuration is not getting downloaded. Only a 2 line text file as below is getting downloaded. ----------Begin file-------------- Could not retrieve config file.Invalid file path. --------------End file---------------- Product used : PA-3220 PAN OS 9.1.6 We are not using the Panaroma ...
Dear Team, I will be integrating User-id agentless method, can i integrate with multiple AD servers to achieve this or is there some challenges to integrate agentless with multiple ad servers? regards, Doyen Admin
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
