General Topics

High temperature DP0 CORE PALO ALTO PA5220

Hello team

Since 2 weeks ago we have detected that the temperature for Sensor DP0 Core is high than other members the Paloalto FW

It is normal?

show system environmentals

----Thermal----
Slot Description Alarm Degrees C Min C Max C
S0 Temperature

Invalid Role - RADIUS

Greetings!

Am troubleshooting PA authentication using RADIUS. The user is part of the appropriate AD group for the RADIUS configuration and the PA and RADIUS server are both setup for RADIUS auth.

On the PA side, added an administrator and set their

LDAPS

 I am in the process of setting up LDAPS on an 850. I created an LDAPS server profile and pinted it to our server for credentials. Aftr creating that, I set up an Authentication profile and Authentication sequence (wasnt sure if it was needed but the

NCR saving passwords with MD5 hashing

Hi,

was wondering if someone could tell me if there's a way of changing the hashing method when passwords are saved in Palo Alto. I can see from 2010 the method is MD5 and we are also dealing with an NCR stating the same, but I can't see anywhere thi

problems with LACP

Hello, I am trying to set up a LACP between a palo alto 3220 ztp firewall and a DELL switch, I have the following problem, it does not set up the LACP.

admin@PA-3220-ZTP> show lacp aggregate-ethernet all

LACP:

**************************************

Browser User-Agent string detection/blocking/logging?

Hello,

Is it possible for the Palo Alto to natively identify, detect, block and/or log the browser user-agent information if the application is "web-browsing"?

Thanks,

-Paul

Unable mapping a field on custom incident type on Coretex Xsoar

We would need to map to our incident type an item that comes from our Siem, but when I select the incident type to use and the related instance, it doesn't allow me to map the aforementioned field.

PA VM

how to download PA VM for practice purpose. 

Prisma URL filtering

VA Scan for Generic-tcp-timestamp & ICMP timestamp response

Hi All,

We had VA Scan finding for Palo Alto’s MGMT INTERFACE IP. Please refer to below:

1. Generic-tcp-timestamp
2. ICMP timestamp response

May I know how can this be blocked for Palo Alto’s MGMT INTERFACE?

Partner Locator - Official and Certified

Hey guys, is there a partner locator on here where you can search for official and certified Palo Alto specialists? Trying to get basic Panorama configs done, thanks.

SSL Certificate expiration date monitoring options

Hi guys,

We have external CA certificate for global protect VPN which we want to monitor for its expiration date so that we can get it renewed we in advance to avoid any outage. can anyone pls suggest how can we achieve it. 

thanks in advance!!