Hello, I’m new to firewall sizing and would appreciate some expert guidance. Could someone help me understand the process to follow, the key questions to ask, and the important factors to consider when sizing a data center or edge firewall?
Hello, I am having issues with trying to get failover setup between vendor routers. We have vendor provided routers at our hub site and at one of our branch sites. We would like to have the traffic be routed to the branch vendor router in the event the hub vendor router is offline. I have setup a static route on the hub firewall to the hub vendo...
Hi all. im about to documentate our firewalls (palo). We have serveal firewalls, and need to get complaint with some docomentation of our firewalls. We are on bare ground and are starting from scarts. any recomendation og template to start from,?
Hi. I have worked with Palo Alto for about 15 years, but now I have run into a really weird problem at home with my lab PA-440. I recently changed from PA-415 to PA-440 at home, and after that, my LGTV (2024) and Netflix on my Xbox console just stopped working. The TV can connect to WiFi, but can't access internet, it's own App Store and so ...
Hi team We have detected problems with mail queues after updating PA-5410 from version 10.2.7-h8 to the preferred version 10.2.13-h7. After reviewing the traffic logs, we are unable to determine the problem we are experiencing. Has anyone had a similar problem? Regards
im working on a airgrapped network, and im trying to implement the panorama with cisco ise and i need the trustsec plugin. where is it at exactly?
Any CLI links or documentation to PAN-OS 11.1?Something like this> https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcLCASor is there a PDF/link that list PAN OS cli commands?Thanks.
Hi, Due to throughput limitation i need to change a cluster in VM300 to VM500. FW is currenting working. What would it be the procedure? minimum impact
Hi All, sorry to ask a trivial question, a supplier has sold just sold me the following SPF LX module. I seen that it says "LN#56 5/2019" In my eyes it means production Lot Number 56, production date 5/2019. My supplier says "This represents the first release date of this item "PAN-SFP-LX." And the manufacturing date of the product can be f...
First tech muted me every time I spoke and would not come back or answer for minutes at a time. Asked the same question for onver 45 minutes that he NEVER answered. Spoke to his manager, who got an escalation engineer. Escalation engineer gave me instructions that NEVER panned out and were incorrect. They didnt update case and there is no wa...
Question, I setup my PA-450 and ATT BGW320; however, I feel there is a loop as the connection sometimes drops or has slow connections on live connections like streaming TV and or live video. I guess my questions are as followed below. First, my setup is fiber going to the BGW320 that I could not get to change it to copper via ONT device as i...
We have 4 Palo Alto Clusters managed by panorama, each cluster has 2 firewalls, each firewall has number of Vsys. We want to configure user-ID with the Agent based method. My proposed solution is to integrate each Firewall directly with the User-ID agent then push User-ID agents in panorama (In device group setup it asks about default firewall...
Is there a way to exclude traffic on port 8080 from the VPN tunnel while connected to Global Protect? I want to establish direct communication exclusively over port 8080, separate from VPN traffic. Is it possible? If so, please tell me how to set it up.
We are migrating onpremise AD to AZUREAD. The doubt is that these users going to AzureAD and all the info (source name and group belong) can not be retrieved by the FW (as UIA did on premise mode). So how can get the info (users/groups) from AzureAD to configure policy source groups in Palo Alto? We doesnt have any SAML IdP configured in Palo Alto.
I'm looking at an old version 7 PA3000 which uses a user-id agent to map users (active directory) to IP addresses.When i log onto the firewall CLI a "show user ip-user-mapping-mp all" command returns what looks to be a valid list of user mappings. However 90% of the traffic log entries have 'source user' blank. There doesnt seem to be a reaso...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
