Hi team, I have configured, Scheduled report but I am missing with the attachment for predefined report. I am receiving mail without attachment for one report. Any Idea what could be the issue ?
dear community, please help with any idees how can convert a config file with "set" syntax into xml format. i know that i can extract the config direct in xml format 🙂 i need this solution to migrate some configuration that care only available in "set" format ..don;t ask me why 🙂 many thank for all your feedbacks
Hi the device certificate is going to expire end of march.My PA trys to renew it and comes up with the following error:Failed to renew device certificate.Failed to send request to CSP server.Error: No OCSP response received(dest => 35.238.43.180) I have no telemetry enabled. Just activated the certificate with OTP on 2020/12/29 after upgradin...
Does anyone know how to configure the cisco ISE side? We can use tacacs now to access the gui but only local usernames and passwords work when trying to access the CLI using SSH. Does anyone have a complete cisco ISE setup? I found a guide to set up palo alto on the cisco ACS platform but ACS is end of life.
Is anyone else experiencing MAC Flapping with an A/S Cluster running PAN-OS 8.0? When one of the firewalls is rebooted and goes into the HA passive state the network detects a network loop because of MAC address flapping between the Active and Passive firewall. Because of this dynamic MAC learning is disabled for 180 seconds on both interfaces. ...
Hi Team, I want to know if there is a way to monitor the firewall default trusted certificates status in CLI?
ISP Configuration in case of TATA (Useful for Indian Customers willing to configure an unmanaged TATA ILL) ** This is useful in case you are not provided with a MUX or a ROUTER along with the Internet Link form the ISP** If you are a customer willing to configure an unmanaged TATA ISP where you are provided with a LAN IP POOL and WAN IP POOL fro...
Hi, Where should I connect in terms of security and management if I need to connect to the oob management interface? I have access layer, collapsed core, and server farm switches. Thanks
Greetings, Looking for some assistance in a scenario below; keep in mind I do not have or wish to have SD-WAN 1. ISP1 services the inside and outside connections 2. ISP2 acts as a vpn portal for extenal staff to connect to the inside and route to ISP1 The problem. I would like to force some of my inside servers (mainly backing up to the c...
HiI am using a pair of PA-3250 in HA and have 17 S2S VPNs using my outside interface that has /24 public IP assigned to it. Due to ongoing issues with our current internet, we have decided to move to a different internet platform (DIA) and enhance our redundancy (enable BGP).However, with this new setup, the ISP must give us a new /29 block to e...
Hi All, I was wondering if there is a way to change the font or font size on a Palo device. Couldn't find any relevant doc for it. Thanks, P @BPry @S.Cantwell
I have 2 firewalls in active/passive mode. Am I able to upgrade one of the PAN's and leave the other in standby or passive mode for a few days while I ensure there are no issues before upgrading the second PAN? It is a jump bigger than 2 versions so the PAN I do not upgrade should go into standby mode. Will I be able to then upgrade the device i...
Hello to All, Can the Palo Alto Firewall autoguarantine users based on the number of violations they have made for a particular time? I know that palo alto can add the users or ip addresses to and dynamic group using auto taging with tags (https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic-user-groups )...
Entered the credentials, got the push. Gp is showing connecting and after 2 sec showing not connected and minimizes the agent. Exactly after 5 sec agent pops up.. Started spinning and gets connected.(Without asking for credential and push mfa) Version :6.1.0
Hi, i know this is about old software on old hardware, but both are still supported by Palo Alto. In the last months we get a heavy amount of OOM Message / Stack Traces / you name it. Actually we arent able to push new config changes from Panorama to the both devices. Everytime the commit will be aborted by some OOM activities and mostly the M...
PavelK
on:
URL FILTERING
reaper
on:
PAN-OS 12.1.X Firewalls & Panorama Managed
