what's the recommended way to block ransomware in a firewall policy?

Hello,

I am new to palo alto .

what's the recommended way to block ransomware in a firewall policy?

GlobalProtect Android version 13 issue

Global Protect login continues to fail on Version 13 Android.

EST Enrollment over Secure Transport

I use certificate based IPSec VPN Tunnels that rely on Certificates.  The Certificate Authority i use supports EST to allow for automated enrollment similar to SCEP.  Is there a way to configure Pan-OS to work with EST instead of SCEP?  I have not be

about transparent

sorry for bothering you all. I'm new to computer networking. And while I'm building my own system, I'm having some trouble.

MODEM (internet) --- Firewall Palo Alto --- Laptop. This is the model I'm building myself. I was going to use transparent mode

Palo Alto Global Protect

Hello. 

   I am looking to setup and use Palo Alto's Global Protect feature; The question I have is if I have only 1 egress port (WAN) port that is public-facing, can I setup my Global Protect on that egress port or do I need to use another port for

For those that seek to get SSH Proxy working

Searching the internet it seems that people are looking to enable SSH Proxy and not finding answers. I managed to get it working but must say that the current supported SSH decrytion parameters for all PAN-OS versions aren't the most secure ones so y

Grace Period for Threat Protection and URL Filtering

Hello,

I'm curious if anyone knows if Palo Alto has a grace period for expired URL filtering and Threat protection licenses.

Thank You,

MJF

GlobalProtect access to local LAN devices

I am fairly new to Palo Alto devices.  We are in the process of testing the GlobalProtect client and have set it up without split-tunneling.

I have confirmed this works for web browsing (get the PA NAT address), but we are still able to get to all lo

Onboarding to Passive HA to Panorama

Hi Everyone,

I need advice on how to onboard the passive HA to Panorama. The Primary is already on Panorama but upon checking, it doesn't belong to a device group yet. I have read some documentation on how to onboard a local firewall to panorama, but