i want to assign some assets to specific admin. any suggestions
Hi everyone, I'm having an issue trying to tell our account representative that PAN should treat upper-case or lower-case (or even mixed) MAC addresses as one entry. I say this because I had an entry in our PAN DHCP Server all in lower-case (entered manually); later, I copied a MAC address into the system was wondering why the device didn't p...
DNS Security Filtering - baymanager.fullswingapps.com - has been classified as "phishing" and is currently being blocked by the DNS security filter on our PA firewall. This is a website for managing Full Swing Golf Pro simulator customer sessions on our equipment. How do we request a classification change for PAN DNS Security? Thanks.
Hi All, I recently established an IPSec tunnel between our Palo Alto firewall and a Fortigate device. The connection appears to be functioning properly, as indicated by a green status. However, I've noticed that instead of utilizing the IPSec tunnel, data is being transferred through the WAN interface. Can anyone provide assistance with this i...
Hi everyone, I am a bit confused about proxy IDs when it comes to tunnel negotiation. Lets say I have a tunnel I am building with a vendor. My encryption domain will be 192.168.1.0/24 and my vendor will have 192.168.2.0/24. So lets also say the vendor has an ASA so I will add this proxy id to my phase 2 config: Source 192.168.1.0/24 Destination ...
Happy Friday, Have anyone experimented similar behavior reported under PAN-186584 on VM-Series? #PAN-186584
Not sure how to post in the automation section anymore as it now has been moved to read only. Anyways.. need some insight please. so we recently did a POC to use Terrarorm to autoscale / deploy VMs in AWS cloud. all good and working. However we need to do a use case for health checks to verify a VM is setup correctly before it goes into produc...
Hi, I understand that to block an individual URL it has to be in a custom category before it can be used in a policy as a destination. For my own education and curiosity, my question is why must it be in a category? What is the processing logic in the firewall that makes this a requirement?
HI WOndering when / if PA's will handle QUIC the same way it handles web-browsing / ssl ? Alex
We are facing one issue from last one month i.e. we are using “Ariba Portal” for our client but the issue is that every 1 or 2 min session auto logout even if using other public network then it is working fine
Not sure it this is the right location for this question but here we go ...I'm trying to replace 2 transparent ASA's in ACT/STDBY with 2 Palo's in the same setup vwire ACT/PAS. Current setup is the asa's are connected to 2 vpn servers in ACT/PAS config, the asa’s have a 3 interface BVI (2 inside interfaces one to each vpn server and 1 outside in...
Dear All, I hope you could help me with the query I could not find answer. The customers would like to monitor the disk space usage and he is asking about Warning and Critical threshold values for the disk utilization (root partition). Unfortunately, I could not find any information in the PA documentation about the above, but based to my kn...
Hi, I was wanting to know if it is now possible to have the Palo Alto firewall log url traffic with the username from chromebooks. It shows the username for all windows users as it syncs with AD, but can't get the chromebook users to show up. I set Google to work with Cloud identity engine, thinking that might be a solution. So far can't get ...
Hi, I have two IPSec tunnel configured between Azure PA firewall and cisco router. worried about continuously getting the informational event logs ikev2-nego-child-sart, ikev2-nego-child-fail & ikev2-recv-p2-delete Did the setting DH group to No PFS on palo alto side after that ikev2 KEv2 child SA negotiation is succeeded but still got the ...
Hello, I'm sending a backup file to Windows Server using XMLAPI. However, when compared to the actual exported configuration, the file size was different, so I checked and found that it was being sent to the Windows server in the format shown in the attached photo below. It appears that files without \n are being exported. Is there a solut...
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
