Hi, i am trying to find an article on how to fix a weak cipher suite on Panorama itself but to no avail. Does anyone have any idea and is there is KB out there who can assist with this? Panorama
I have gone through some topics related to SSL decryption with forward proxy. Here is something that I need to learn how to resolve. We need to decrypt everything for PC/laptop/mobile. With wireless, if we have 1 SSID, then the laptop & phone can be used then we can assign our generated root cert from Windows Server to the laptop & PC ...
Last week we lost one of our sites Acitve/Passive firewalls. An event appeared to happen, that caused the firewalls to try a failover. However the failover failed, and the firewalls were in a "hung" state. When I had smart hands plug into the MGT port, I was able to get into the GUI. The ports all showed "down"(or gray). Previous admins set...
hello I am preparing to go to site for a PA 440 install Q has anyone used a pre site capture document that could be sent to the customer ahead of the install ? for example a best practice document to capture number of zones security features etc
We have created a report template in the Cortex XDR console for endpoint status. The creation was successful, but the generated report only displays the endpoint status in an Excel format. However, we would like to view the endpoint host list status in PDF format. Please advise on how to achieve the desired PDF format for the endpoint host list ...
Hello ! Im having issue with my netflow configuration on the PA5260 in HA mode. I'm not receiving any log on my Qradar where as i have configure the netflow by following the https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJzCAK The following Step have beeen done: 1. Netflow profil created 2. Profil applied on a su...
So may be a 2-part question. First, we have 2 ISPs both equal bandwidth so I've setup ECMP using IP Modulo do i need to set up PBF, or is that if you don't have equal ISPs? 2nd and the real issue. One of my applications that is tided via public dns to my secondary isp can't be reached. I've set up NAT and Security policy to it (i think corre...
Hello! When we apply a Netflow profile to an interface, does it capture the ingress, egress or both flows? If we apply the same profile to the Inside and the Outside interface, and we have a flow which passes both of them, will we send duplicated information about this flow to the remote Netflow Analyzer? Thank you!
Hello All, I'm a bit confused to understand the exact process. When monitoring the traffic from an external source ip (malicious one) and checking the logs in Pano see that session end reason was "tc-fin" and type was either "drop or end" with action being "allowed". Does this mean that , traffic has been blocked by the firewall or dropped by th...
Palo Alto Networks 2017 Updated Visio Stencils. ::edited by @reaper the official article can be found here :: The stencils can also be found here: http://www.shapesource.com/palo-alto-networks-visio-stencilsource.com/palo-alto-networks-2 Enjoy !!!
Hello,I have two Destination IPs (one for each GRE Tunnel to Zscaler). How would I need to configure my palo alto firewall to allow GRE Tunnel Failover, so that traffic only flows through the primary tunnel and flows through the secondary tunnel when the first one fails?Thanks!
How and when to use ARP-Loadsharing and Floating IP - Upstream/Uplinks Hello Live comunity, how are you all doing. In the use cases you can see that the use of ARP Load-sharing or IP Floating, ARP is used thinking in the access to the Gateway vs IP Floating that is something more like fail-over more like an active/passive so to speak, than ARP L...
On my network, I have a Windows Server CA, a Windows 10 box, and I PaloAlto box. The PA is currently running Software version 10.1.7. I have created a PA.csr and sent it to my CA server, and received my PA.cer w/o a private key. I have uploaded the PA.cer and the CARoot.cer to my PA box. It seems like no matter what I do, or configure, I can...
Hello Community, I am facing an issue while trying to integrate XSOAR Cortex with Splunk SIEM. I have followed the necessary steps, including providing the IP address of the Splunk SIEM, my username, and password for the SIEM account. Additionally, I have left the port at the default value, which is 8089. However, when I click on the "Test" bu...
The GUI is very slow and the commit can take up to 10 minutes
PavelK
on:
handle (username) change?
PavelK
on:
Replacement of RMA
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
