Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
2 web servers, inbound decryption for both, one working and other does not and are using same wildcard cert.
Bold are the only differences I see between 2. I don't know why working server without decryption shows the root instead of intermediate SHA2
...
I just created a new file blocking profile and added xlsx, pdf, docx and multi-level-encoding. I set the action to alert. I want to monitor the found traffic prior to implementing a block rule.
When I download a PDF file from the Internet, the vent
...
Hi again,
after good feedback received on the first post on MineMeld architecture and hardening I wrote a new post on how I built the foundation of near-real-time integration of MineMeld with our Information Security Operation Center (i-SOC) custom
...
Helo Everybody,
I have created a custom report in Panorama to generate the same data that we get in ACC - Application usage report, for last one month. But it looks like the data in the custom report is always different than that which is genereated i
...
Hi,
I wanted to use the pre-defined reports for a summary of the last 7 Days (or Last week) but as I see, these pre-defined reports only work for the last 24 hours / last day, even though I send the Email with all pre-defined reports only every sunday
Hi,
since we are changing policy targets from "device name" to "device tag" (device-Tag defined in Panorama > Summary), we still have the need to filter for special devices (device-tags) within the policy sets.
But what I have seen with 9.1.6, filterin
I have a rule with a URL filtering profile with HTTP Header Insertion and a Restrict-Access-To-Tenants list that has used up all the characters (512). I have tried to add another Restrict-Access-To-Tenants list but it won't accept it. I have also tri
...
Hello,
Was wondering if anyone could help me? We recently installed Crowd Strike Firewall, but it's not being detected by the HIP Check I setup. I have created a rule for Crowd Strike Firewall. So technically it should see it right?
Thought I would just put this notice out since I know a lot of people don't actually subscribe to security advisories directly. If you haven't already, I highly recommend that you sign up for notifications via https://security.paloaltonetworks.com/ a
...
User id not fetching in traffic logs.we created user base rule on that basis mapped ip address shows user id for same rule .but some time user is not authenticated from that user base policy rule and it is moving from next any any rule. if it is mov
...
Good afternoon:
I hope you can help me with this, thank you very much in advance.
I have Global Protect configured as follows:
GP: IP pool 172.16.11.0/24
Split-tunnel Include: 192.100.11.0/24 ( Corporate LAN )
DNS assigned Global Protect: 8.8.8.8.8 and 4.
Hi Folks,
just to let you know, since I found no KB Articel for this issue. Policy Push from Panorama respectively local Commit on the Firewalls ended in strange Error Message according Group Assignment to Policy.
vsys1
Error: Failed to add group to i
Have any suggestion for uptime days?
I remenber seen one doc is 300days suggest reboot.
Now have any this doc?
Hello ,
We have integrated already the AD ( 3 Servers for redundancy)
The User id we are using is the default one which is on the PA FW
The domain is abc.nl . The setup is working .
Now we are building an entirely new domain called abc.es . migrat
...
Hi,
May I check if it is possible to disable SSH CBC cipher and weak MAC hashing on Palo Alto Firewall?
If so, may I know how to do it.
Had no luck searching for a solution online.
Seems like there is no menu/config file (e.g. /etc/ssh/ssh_config) to e
...
