Hi all , Can we install Cortex XDR agent on VMware ESXi Host Machine? If yes please share the respective supporting documents.
Hi everyone. Currently I have a request. When vpn user is accessing throught globalprotect is necessary that fullfill two thing: If device is corporate (domain) he can use internet resource enterprise internet. But, when device is personal he must navigate with their own personal internet resources. Can I reach this with HIP profile and split...
What is the CLI command for viewing transceiver light levels? Palo Alto 7050
I have a VPN tunnel, which is up and running. I have two proxyIDs in the tunnel with the same local address but different remote addresses. I can only get one proxy to connect. For example, I currently have proxyID1 connected and can ping the other side. In the CLI, if I type test VPN ipsec-sa tunnel tunnel-name-proxyID2. It does not come up. I ...
Good morning, reviewing the documentation of palo alto and fortinet informs me that they use the same internal ports for the fsso and for the user-id and to rule it out completely I wanted to know if you could configure the fsso and the user-id in the same server and that they are working simultaneously.
Hi Guys, according to below article URL entries is cached for users per category.is it possible to check cached entries per user/URL/category to see current state? Continue Action in URL filtering not working as expected Thanks,
We would like to migrate logs from M100 to M200 – Could you please advise how to proceed? M100 has 4x2 disks M200 has 2x2 disks M-100 appliance to an M-200 or M-600 appliance- I understood this from the below URL. Kindly correct if any change Log migration is not supported. The M-100 appliance logging disk form factor is not supported on the M...
I want to look at the url address of a data packet that was blocked by a deny rule. I had url filtering applied on the rule but the denied traffic log shows the url category but not the url address. Please advise me in logging url address for denied traffic. TIA
Hi everyone, I'm trying to set-up a Subinterface on a Aggregate group with LACP on a PA-3020 and a DELL 6248 switch in a test envoirment. If I assign an IP on the default VLAN to the Aggregate Group everything works but I can't seem to get the Subinterface to work, I've tested a Subinterface on a standard interface which also worked. Below is th...
I wanted to put this out in the forum to to save someone time and answer the question on the use case of TS-Agents participating in user-id redistribution. In a long trouble-shooting period and TAC engagement, it was confirmed that you cannot redistribute user-id mappings obtained from a Terminal Services (TS) agent.We have submitted a FR for th...
Hi All. I'm running into a bit of difficulty for setting up a DNAT configuration on my PA-820. Essentially what I want to do is remotely access an iMac workstation from outside the LAN. However, I don't want to advertise port 5900 I want to setup port translation from 2485 to 5900 to a particular host on the LAN. I've created a DNAT rule as fo...
I was wondering if wildcards are supported on the reporting interface of the Panorama?Actually I would like to run a very specific query on the traffic log. In the normal traffic log we see all the traffic of all our users.I would like to report on the traffic patterns based on a certain kind of domain users. Therefor I need to be able to single...
I've been researching various cloud delivered security services for our e-commerce platform, and I'm a bit overwhelmed by the options available in the market. Our main concern is ensuring the safety of customer data, Nexus-iceland portal app especially during transactions, as well as protecting against DDoS attacks. I'm leaning towards a managed...
We cant go online to submit a support case because no products come up when entering any of our devices. Called support and entered our serial number but it will not take because we must submit a case online first. Called back and this time tried to submit a administrative case thinking I could get someone to help, nope Called back and chose d...
Hello All, I would like to know about the network configuration in cortex XDR. What is the benefit of adding the IP range & domain suffix for the customer deliveries? Regards, Sakshi Seth
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
reaper
on:
Server monitering -Connection refused
PavelK
on:
Commit Failed
