Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
Hi Everyone,
I have an issue that I haven't been able to resolve. I have a small domain setup with a Windows Server Update Service that is located in a DMZ. The machinges that are in the inside network (trusted), are setup to pull their Windows upd
...
Hi all...I have a Palo Alto Active/Active pair and the HA3 link between them is down. Will PANOS then power-down all other physical interfaces when the HA3 link is down. Just looking for confirmation that this is expected behaviour or whether I have
...
Is it possible for Palo Alto Firewall to decrypt third party VPN agent traffic such as NordVPN, NordLynx like decrypt HTTPS web-browsing traffic?
If it cannot decrypt these traffic, anyone know the App-ID for NordVPN, NordLynx?
I found some VPN app-ID
...
We are trying to use DNS wildcards and Custom URL categories to restrict access to certain machines in a security policy. We cannot get it to work and I cannot find any docs that a URL filtering license is required to use Custom URL categories. I hav
...
hi everybody,
we've installed cortex xdr agent on a terminal-master server which gets cloned for distribution
xdr-agent on master has active connection to cortex-cloud
but cloned servers can't connect...
xdr-log:
2022/05/18T14:32:44.590+02:00 <Info>...
Hi
I am quite new to Palo Alto firewalls, but have worked with different vendors before.
When running a HA in Active/passive a central VIP for mgmt is usually setup, so you dont connect to the passive FW.
From what i see there is no VIP for mgmt in
...
Hello everybody.
I allow a url. I also allowed categories for that url, but the site still doesn't work properly. There is a problem connecting to a server on that site and it is deny
Thanks in advance
Hi,
we try the export of the config of Panorama and our bothe Firewalls 3260 thru the "Scheduled Config Export".
It runs well with FTP and SCP port 22.
With a custom port ssh, the "Test SCP server connection" failed.
I found no future infos on https://
...
Hi Guys,
Does anyone tried to use PA-3220 model as proxy server? Currently the internet traffic of my company is using bluecoat proxy with pac file (config in windows proxy setting), and the proxy also inline with sourcefire for doing SSL interceptio
...
Are there any recomendations or requirements to configure a switch port for management interface for a PA firewall?
Should it be an access port or could it be a 802.1q port (trunk mode)?
Are there any recomendations to enable/disable/specify lldp/cdp/v
...
Hello Community,
I checking to see what everyone is doing for their allow lists for some thing like an S3 bucket.
Scenario: Lets say my server has no internet access due to policies denying the traffic. I then create an object, FQDN, xyz-s3.amazo
...
Is there any PA published document for the node paths and entries in the configuration file? And how do you tell if something is a path or an entry in the config? It seems extremely painful to try and figure out an xpath to pull the data you want. Se
...
Where can I know how to setup the application SLA condition?
I read some Prisma SD-WAN Administrator’s Guide, I seen there are lot of function to enable Path selection and monitoring based on the Link Quality, SLA.
But how can I set the SLA of the ap
...
Hi everybody,
i've enabled and configured an antivirus security profile and attached to a security policy for web-traffic
as i see web-traffic can be antivirus-scanned, but my problem is: traffic is identified as ultrasurf with port 8080
so antivirus
...
Hi all,
i'm not having much joy getting this working.
I have created a static route for a subnet which I am trying to advertise to an eBGP peer.
I then created a redistribution profile with only static enabled
I then added that profile under bgp Redist
...
OtakarKlier
on:
RFC1006 protocol over TCP
OtakarKlier
on:
Windows update URLs with IP addresses show up as unknown
OtakarKlier
on:
Panorama Upgrade
OtakarKlier
on:
Layer 3 between 2 buildings
OtakarKlier
on:
URL Category rule works on some firewalls but not others
OtakarKlier
on:
CPE for the Conferences or Summits
