Hello, i looking for a cacti template for my PA5260 running PAN OS 10.1.8 for monitoring the device and all interface and subinterface. Best Regards.
My predecessor managing the Palo firewalls always entered a website/URL four times in the URL Blocklist using the format below as an example: netflix.com *.netflix.com netflix.com/ *.netflix.com/ Is this really necessary? Doesn't *.netflix.com accomplish the same thing or are these all necessary? The examples here: https://knowledgebase...
I don't see an option to submit a new case
I'm setting up User-ID. i have a windows server 2012r2 domain controller, and a windows server 2019 domain member for the agent software. I have configured a service account with user rights assignment to allow logon as a service on the agent host. i have configured permissions to the install directory and to the registry key for the softwar...
Hello Bros' currently we are in the PanOS version 9.1.x and according to this link https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary this version will be EOL by 12/2023. from this I can understand that the all version of 9.1 will be EOL, means I will have to move to the PanOS version 1...
Hello Community, I know there is a new application for AI tools, but its just for Chatgpt and I already have a DENYALL plus a special filter for new Applications using the Filter: However does anyone have a comprehensive URL list for AI websites? Want to block those as well. Here is a short list of what I have scrounged so far. chat.openai.co...
I have a simple ask to pull a list of IPs from an external txt file into a PAN. I can reach the URL and its simply a text file with CIDRs separated by lines. However, when looking at the list entries and exceptions its blank. I seem to have the same problem with a domain list as well. Has anyone done this before and can point me in the rig...
From Where to start Network Security Basic to Advance || Palo Alto Firewall As mostly IP Network/IT system Engineer confused that from where to start Network & Cyber Security concepts & practical Hands-on experience, in this article I will explain & clarify all the below queries · Basic theoretical Network security concepts · W...
Hello, I have an issue with Global protect connection for our customer. They are trying to connect via external PC/network and are having issues. When they are trying fomr internal PC/network they have no issues at all. I have a log from Global Protect app that customer send me. Can you guys help me what could be the issue here ? I am run...
Hi, i will try to block upload and allow download. I would try to use app-id but the two app-id download and upload depend on wetransfer-base. Example : If im allowing wetransfer-download and im blocking wetransfer-upload and wetransfer-base : wetransfer-download is blocked because of blocking wetransfer-base. There is way to do what ...
Hi folks, Our customer configured split-tunnel on VM to include only certain IP addresses and domains and want to exclude any other traffic, so exclude options are blank. It seems that some traffic is still routed through tunnel (f.e.Telegram, bittorrent etc.) We tested this config on panos 10.1.6 as well as on 10.1.10. Also we were testing...
HelloHow to filter traffic log by non-empty user name in Source User field?.I have Captive Portal for uers, but some exeptions for printers and other stuff that isn't able to logon. Id like to filter traffic and get only traffic that isn't authenticated.How to do that?I know that I can put IP address insted of user names - but I want to know is ...
How can I verify what traps my palo alto sends?I need to know some command or some method to know what snmp traps are being sent from my FW
I'm upgrading to PA-5410 and I can't find the documentation showing if the M-200 supports this device. Is there a link that shows what PA devices are managed by each Panorama device? I've looked everywhere online and can't find anything.
Good afternoon, I've got a simple site to site IPsec tunnel in non production that I'm having a problem with. Currently I have the mgmt interface up. I also have my trust/untrust interfaces connected to a Cisco switch on the appropriate VLAN's for the subs I have programed on my PA-440. For some odd reason, I cannot see the MAC addresses of...
Raido_Rattameis
reaper
on:
VPN with two subnets
TomYoung
on:
Device Security license
reaper
on:
No proposal chosen ikev1
| User | Likes Count |
|---|---|
| 8 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
