Is it possible to DDoS/DoS a public IP which has only outbound traffic and ipsec tunnel. No DNAT configured and ping disabled.

Multiple IPSec tunnels, single external IP

Looking to set up a POC with a PA-820 that has the following

• IPSec VPN site-to-site between our local facility and 3 partner networks
• Single external IP, 3 tunnels (IKE P2)
• NAT to a single host on our local private network

Is this reasonable/possible?

details logs traffic report generating issue

I'm trying to fetch report custom for traffic details log ,but it not generating .summary logs report for traffic is generating. pan os version 9.0.9-h1 .PA-3250 model.

Failed exporting config bundle via ssh

Failed exporting config bundle via ssh to servername.com /tmp/pan/pano_name_20220106.tgz: No such file or directory..Killed by signal 1..'

It was working, but suddenly has stopped.  "Test SCP server connection" works and drops the test file in the co

PRISMA SD-WAN

Is Palo Alto dropping support for PRISMA SDWAN?   A lot of the older but detailed CG branded docs are gone, but there are no new Palo Docs to replace them?   I'm interested in implementing the Cloudblades, and all the site links take me in a loop of

Where do you get additional threat feeds from

Hello All,

Just curious as to what additional threat feeds you use to ingest into your PAN. Here are some of the ones we use:

Threat intelligence blocklists
https://talosintelligence.com/documents/ip-blacklist
http://rules.emergingthreats.net/fwrules/eme

FQDN URLs that change IP addresses quickly

PA-3220 Active/Standby Pair

10.0.8-h8

We have a URL we tried adding to a negate policy for inside to outside decryption.  This resolves the ability to pull credit reports into our core financial system.  However the problem is still intermittent.

Its

Link autofocus and minemeld

Hello,

Could you please explain me the link between autofocus and minemeld?

Thank you.

Problem with Wildfire Registered Server busy or error

Hi team,

We have detected loss of connectivity to wildfire, We have followed the following link but the problem persists https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMCYCA2

Model PA-3220

Version 9.0

Does anybody know what

Firewall Failure

Hello guys, last week i have experienced something very weird.
I have two PA-3220 in HA Active/Active. They were working properly and all of the sudden, the Active-Primary stopped working (all the interfaces went down except the management interface,

Engine Status: Backoff - Unable to Config Huge feed.txt

Our Minemeld is unable to add new feeds which are larger in size. IOCs in one of our source files count around 150000 but it seems like only 1700 are added before the error comes Engine Status: Backoff and Engine couldn't able run again as it shows F

Multiple access domain/role to one user using Radius/ISE

Hi everyone,

I have a scenario that i have two differents access domains and one user can access both, but one with read only permissions and another with write permissions.I cant create users manually and select AD / ROLE because the idea is that the