Hi, Can we disable physical USB port on the Firewall? I didn't find how to disable this usb interface on the firewall. or is there any documentation how to disable this? Thanks, Denny
https://security.paloaltonetworks.com/PAN-SA-2023-0004 This bulletin states that there is no fix for the GP Client. Does anyone know if they are working on one? The idea of locking down completely the local LAN could prove difficult and after a discussion with GoDaddy (our cert provider) they state they will not issue a cert with an IP addre...
Hi everyoneI have a problem whith user ID agnet on Windows 2012 Server.I have a errorError - Failed to add mapping (x.x.x.x) - () - in x.x.x.x mains adress IP.Appears many times. Do you have any idea what is the reason this error ?? Regards Przemek
Hi, Anyone ever configured BGP + BFD + Graceful restart, trying to do this setup but not sure if there is any timers to ensure below. Can't find anywhere on any knowledge base. 1. when ISP link go down - BFD ensure seconds failover, ISP gateways are on same subnets attached through switches to Palo 2. when firewall failover - the BGP sessions s...
Hi Support, We have Client in Cork want to know about the FW HA across Different Location. What are requirements for having fw cluster spread across different GEO locations (latency, delay, etc)?Is this recommended at all by PA? If yes, what kind of link is required for HA connectivity (L3, L2)? We have some ideas of spreading current firewall c...
Is there any documentation or can someone guide sending logs to splunk from XSOAR? Both are SaaS products. Cortex XSOAR #Splunk
- We ran into an issue where the commits from Panorama were failing with error: • . Performing panorama connectivity check (attempt 1 of 1)• . Panorama connectivity check failed for xxxx. Reason: TCP channel setup failed, reverting configuration• . Configuration reverted successfully - We checked No validation errors while the commit failed- run...
Hello, firstly, apologies for the long winded background info to explain my requirements !! I've a large project with hundreds of Firewalls to deploy. All initial base-configuration and Panorama-integration will be completed via the use of various specific templates, template-stacks and parent/child/grand-child device groups, achieved via auto...
I got a mail from user that one application (Textpad) is blocking by XDR . what should we ask the user to share?? For any application??
I'm looking over the log files of a Mac (v13.4.1) that cannot connect using GlobalProtect (v6.1.1-5). I'm comparing it to another Mac running the same OS which works, and in the PanGPS.log files I'm seeing this difference: Working: Line 53: P10741-T259 07/19/2023 15:37:40:147 Debug( 759): CPanMSService::Init connect timeout 5, received timeout...
Hello, i have the problem that I have two PA-445 as HA clusters where the management interface does not have an uplink.I've already tried several cables and switches, but unfortunately I can't get an uplink on the interface.There is no spanning tree on the switches, all ports are active.Type: 1000T, Mode Auto, Flow disabled.Switch port: VLAN 1...
Hi All, I have a negate rule on the firewall Souce Address - 10.1.1.1(Negate) Destination Address- Any Service- https Action- Deny Does it mean that it will allow 10.1.1.1 and deny everything or does it mean that it will deny everything and then I need to create an accept rule to allow 10.1.1.1. Will 10.1.1.1 be allowed through this negate...
I'm seeing some posts stating that Secure Renegotiation is not supported on the Palo Alto platform. Is this still true for the latest release, v9.x? If so, how is it enabled?
Hello. The Palo Alto license has expired. I want to proceed with the dynamic update, but it's failing. Is there any way to proceed with dynamic updates while the license is expired?
Hi Support, I have cisco sfp model no : GLC-LH-SM, i would like use it as HA1 and HA2 for PA-850 on both the end of firewall. Would like to know weather it will work or not
PavelK
on:
Throttling ingress bandwidth on a sub-interface
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
