how to download Device Control Violations data from the cortex
Hi, We recently deployed Palo Alto and I notice that its blocking qualys scan on my internal network for the traffic passing through the Palo Alto vwire. How can allow all qualys traffic to pass through the Palo Alto?
Hello, I have PA VM100 with PAN OS 10.2.2. Enabling Telemetry and setting up the Telemetry Region as Americas. The status for Device, Product and Threat is always "Failed" with message "Send file to CDL Receiver Failed" Any advise, suggestion or how to troubleshoot this much appreciated Thanks
Dear Team, I'm trying to set up GlobalProtect's 'Serial Number Check' feature, but I'm having a hard time. GlobalProtect is already being used in conjunction with LDAP. So, when I do not use the function, I log in normally. I want to control by matching the serial number to the LDAP user. Is it correct that the serial number mentioned ...
Could someone explain why this site would fail via our firewalls, it works fine local and split tunnel. I would imagine it's to do with encryption levels as wireshark shows a few cypher spec changes during the handshake.. FYI.... SSL Proxy / decryption is switched off for this site and aplication is set to any and is classified as education/low ...
Running panos 10.1.8 on vm-300. a blocked https page gives user -This site cannot be reached rather than palo block page notification. Is this because ssl decrytpion is not enabled and is required to get block page notification for https url which are supposed to be blocked via url filtering.
Hello I am trying to shutdown the device using CLI and GUI but it is getting reboot after some time . Click on Device tab > Setup link > Operations tab. Click on shutdown device under device operation shutdown command (request shutdown system) in the CLI. PAN-OS 10.2(10.2.3-h4), Please help me with the issue .
I am creating a security rule to allow url whitelist but i m facing issue to commit Push the rule.One column is Audit comment is not taking any text.Please suggest what should i do.
I have config LACP between PA3400 and Cisco Switch everything work fine implement test on standalone mode Cisco eth1/1 (po1)<----> PA eth1/1 (ae1) Cisco eth1/2 (po1)<----> PA eth1/2 (ae1) All traffic can use normally until we test shutdown or unplug one of member on firewall . Result : traffic is dropped 1 timeout My question : this...
how to block facebook and instagram on mobile, currently it is blocked in browsers but not in mobile applications
Hi All, So we have a PA FW with PANOS 9.1.x We have a requirement for a specific inside vlan to have internet access to office365 only (teams,outlook etc etc).. tried with app-id using the office (365-enterprise-access and consumer) access to no avail, Suspect this did not work due to the FW not able to decrypt the ssl traffic. we also do not ha...
Hi Team, I have a query regarding the HA configuration in WF-500 Private cloud for 2 devices in the cluster. I have found the document if there are multiple devices/nodes in the cluster. https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-appliance-clusters/wildfire-appliance-cluster-resiliency-and-scale If there are 2 W...
please help me with how re-establish connection to server i have xdr agents installed on windows endpoints but some agents show no connection to server i have tried cytool runtime stop/start restarting endpoints
Does anyone know how to set up forwarding of DHCP logs (leases being issued mainly) from a PAN device operating a DHCP server to a SIEM via syslog? I've already configured a log forwarding profile but I'm not seeing the appropriate DHCP lease logs in my SIEM.
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
