Hey everyone, wanted to ask for some help, I created a new user with wrong email for SSO, is there a way to eliminate this user it is not showing under manage users so I was wondering where I can edit that. Thanks
Needing a little help. I have a PA 5220 within a secure enclave (so no connection to the internet). I can ping a gateway in another enclave without any issue but when I ping the network beyond that gateway I get no reply. My GW external interface and their GW external interface are on the same subnet and their internal network and my internal ne...
Hardware: PA220 Version: 10.1.5-h1 I'm trying to use a certificate that appears to be having issues. I first noticed the issue when I attempted to create a certificate profile using a trust root CA. When I try to create the profile, it fails to create and has error message "CA -> *CA NAME* is invalid -> CA is invalid". I then went to e...
Hi All, Needing your suggestions i'm adding a list of ip addresses on policy that I created on branch and when I push it I got an error on NAT ISP 1, NAT is not a problem I knw because everything is working correctly. I notice that this has been added on dublin site so what I mean is there is a policy on dublin site then there is policy on bra...
Hello, How can I block with paloalto the access to my internal network users to any page related to artificial intelligence? Thanks
Hi all, I am trying to get Palo Alto VM series (10.2.3) to work with layer 3 sub interfaces on Hyper-V (2022).I configured interface/subinterface from the documentation (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRkCAK)I also tried it with removing the ip.adr 192.168.4.252/24I also tried setting the vSwitch to tr...
We recently completed a migration and I am in clean up mode. I would like to utilize applications but we do some no decryptions exceptions rules that bypass decryption. I am concerned that without decrypting, the rule will break and traffic won't flow. What is a safe way to begin transitioning from services to applications?
Hi Guys, I am working with below scenario and would like some help. As shown in diagram: A cisco switch IE3400 is connected with PA-440 with trunk connection and also one of the interface of switch is connected to MGMT port of PA-440. There are multiple VLANs in the network but I showed only the relevant in this case. Cisco Switch has Vlan 10...
LIVEcommunity recently introduced a new feature to help you know when content has been reviewed for accuracy: the Audit Date Stamp. With this latest enhancement, you can now easily identify when an article has been audited, confirming that the information is current, screenshots are up-to-date, and any solutions or use cases function as expec...
Recently, we did a Migration activity, From the Juniper SRX to Palo Alto. After successful Migration, we can notice that one drop over the PA firewall.We did troubleshooting from our end and in the global counter can see below error with drops flow_fpga_ingress_exception_err 1865 19 drop flow offload Packets dropped: receive ingres...
We currently have a policy in place that allows all HTTP and HTTPS traffic from a test server (Trust) with a static IP address to reach untrusted networks. However, when accessing the server from a browser, it automatically redirects to a captive portal and blocks internet access for server applications. The internet was functioning properly on ...
What are the known bad url categories that palo checks is blocked? We currently block all the categories in this document but AI-Ops still flags it. Is there a way to see specifically what its failing? Malicious URL Categories (paloaltonetworks.com)
We are supposed to have 24 x 7 support through Westcon but have been unable to contact them. Previously when emailing their support an autoresponder would reply with a ticket number. Not even this happens now. The AUS support number rings out. Is it possible to raise a case with Palo Alto directly - we have a VPN issue that must be resolved by...
Dears, Is there have any plan on RoadMap about integration Cortex XDR with Exchange Server 2019? It will be great to determine attack vector in phishing Cortex XDR
OtakarKlier
on:
How to block all AI-based applications
reaper
on:
Server monitering -Connection refused
OtakarKlier
on:
Commit Failed
OtakarKlier
on:
SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3
