I tried generating a self signed certificate on the firewall and installed this on the domain controller and assigned it to WinRM-HTTPS. This worked but I can’t figure out why it’s rejecting the certificate from our internal CA.
Hello Live Community, how are you doing? I have the following doubt and concern If I have a PA configured with a Self Signed SSL certificate for Global Protect use, SSL/TLS profile for GP, and that certificate is is close to expiring. All the workstations that have the global protect client, have the certificate installed, so that it is re...
Hi All, l think l am missing something fundamental. l have a policy with "allow" action, but in the traffic logs session end reason is "policy-deny" : Despite all this, l am still able to access the server:
Hello I'm currently planning to upgrade my Palo Alto Networks firewall from version 9.0 to 10.1. As this is a critical operation, I want to ensure a smooth transition without any disruptions to our network and security policies. Before proceeding with the upgrade, I'd like to seek advice and insights from the community on the best practices to f...
Hi All, I am configuring the VM Firewall. I will not be able to manage the Firewall with the Mgmt Interface as customer has restricted only internet access and MPLS access. So decided to manage it via MPLS interface. There are 3 network adapters in ESXi host as per KB. 1 - Mgmt 2 - eth1/1 3 - eth1/2 Initially i configured eth1/1 with the /29 s...
1) I am planning to upgrade to 11.0.1 but I also see a 11.0.1-h2 - which one should I upgrade to (I'm on currently on 10.2.3) ? 2) On the support pages under software updates I'm filtered on 'PAN-OS for VM-Series'. Will this give me correct installation files for AWS EC2 ?
I have 5 internet lines in my company, and currently I am aggregating them using the Firewall, using ECMP technique. the 5 internet lines have a different bandwidth (different speeds). the weighted round robing seems be the best way to go as I have an internet lines with different speed and I want to assign more traffic to the higher bandwidt...
I wanted to use the "show system logdb-quota" CLI command on our Panorama VM to determine the retention days for GlobalProtect and it appears to be missing in this command. Is there another that can give you the number of days properly? I only get system, config, hip-reports and appstat returned when I issue that command. I seem to be running...
files are occupying under traps. [root@xyz opt]# du -sh * |grep G5.9G traps[root@xyz opt]# pwd/opt[root@xyz opt]# cd traps[root@xyz traps]# du -sh * |grep G4.7G ecl[root@xyz traps]# du -sh * |grep M80M bin479M download25M glibc67M lib11M lib3216M local_analysis256M ltee23M persist74M python230M shared_packages[root@xyz traps]# pwd/opt/traps[root...
Hello, as the Subject' saying, i'm facing this issue - what is the recommended procedure? While I'm considering upgrading my 3220 pair to 10.1.10 prior to migration (I'm not that keen to go all the way to 10.2.4) and i'd prefer to avoid the upgrade process entirely if possible - so the Subject still stands. As it is now, my setup is running 5...
Hi Team, HTTP/1.1 404 object not found We are seeing this error when the traffic is passing through the Palo. When we bypass palo it works absolutely fine. May i know what could be causing this? Regards, Sanjay S
Hello, I am trying to export a self-sign certificate via CLI as I am getting an error related to the certificate. to give you the background, I am trying to access a remote firewall (PA) via GP whihc terminates on the local PA. when I do that I come across "Certificate Error There is an issue with the SSL certificate of the server you are trying...
I have dedicated loggers running 10.1.5 and need to upgrade them to 10.1.10. Before I do that, I need to update the content versions. However, when I try to install via dynamic updates from the Panorama to the Log Collectors, I get the subject error. ms.log 2023-07-22 11:20:18.745 +0000 Error: pan_evtmgr_client_check_action(evtmgr_client_actio...
I´m working with PRTG to monitor our network devices specially Firewalls, for PA-220 I want to monitor and set notifications for the Data Plane CPU usage I can get the OID for the CPU usage, but it´s not the same as the one I want. Does someone know about this? Thanks.
I have follow below link to allow these URL in my security policy but today I perform Windows update still very slow and from the log I still able to see some aged-out in my log for update. Any configuration change can help me to solve this issue ? https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/depl...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
