Can someone step me through exactly screen by screen using this info how to change this block-continue to an allow?
I noticed that the “opcmdhistory” log disappeared in Panorama after upgrading to PanOS9.1. It was there in 9.0 and previous versions. Do you know why it changed and if the information is in another log file?I was using it for troubleshooting and detecting cli commands executed by other admins, API calls, etc.
We can set the following actions for URL filtering categories: The URL filtering logs show the following possible actions: alertblock-urlcontinueblock-continue The first 3 are clear and relate to the action we set in the categories. Can someone please explain the "block-continue" action?
Hey,I have a customised login page for when users connect to the GlobalProtect VPN and it frustratingly doesnt fit on the screen. I would like to know whether the Notification window can be resized and grow to a larger size than the default.
I m setting up a small office network where the endpoints are connecting to a switch that is in turn trunked to a PA220 Firewall . The firewall external interface is configured with a static IP address within the same range as the ISP IP router . However it appears that neither the ISP router or the Palo can receive arp entries off each other le...
Hi Folks, I have quick question. If I want to do some home lab for learning purposes for example with eve-ng , how I can get PA-VM image I applyd for 30days trial, however for unknown reason I was rejected After our evaluation of your application, we are unable to supply a trial product download due to Trade or Legal restrictions. 1. I'm from ...
Has anyone had sucess in the PAN-Agent capturing logins for Mac OS X clients joined to Active Directory?We have about 100 iMacs running Mac OS 10.6.5, and I always get a "_unknown_" username when looking at their IP address in the PAN-Agent. We have a Server 2008 R2 domain controller.
Just wondering how others are monitoring large FW/Panorama footprints for things like license expiration, hardware failures and so on. Thanks in advance for your time.
Hi All , We did not set decryption policyBut in the threat log, it is seen that decrypt is yes, and the traffic is wan to wan. Under what circumstances will the log of wan to wan decrypt is yes be generated? thanks
Hi, Does anyone know how you can remove an asset (PA-200 ) from your account ( unregister a device )I like to remove the devices from my account that I don't use anymore. kind regards Frederik
Hello, We have a offshore Palo Alto firewall that recently we noticed the details under the Network tab and Device tab is not showing on the GUI. But on the CLI the details are there. (ip address, settings etc) and the firewall is still operational have you guys encounter this before? for your advice.
Note: "test url-info-host security.microsoft.com" doesn't work but "test url security.microsoft.com" shows both local and cloud results. Cloud / Local URL DB are the same. Software Version 10.2.3-h2 security.microsoft.com: Doesn't exist in the URL DB don.jarmon@Spragins-PA-FW1(active)> test url security.microsoft.com security.microsoft....
There is a security rule with two FQDN objects used as destination. Along with that user group is configured and source/destination zones - nothing special. There have been a couple of cases where traffic suddenly stops hitting the rule although everything seems to be in the place. It turns out on of the two FQDN address objects is not resolving...
Does BGP on PAN-OS, any version, support Route Origin Authorization (ROA) or Resource Public Key Infrastructure (RPKI)? I find nothing in the docs or in the web interface that would indicate it is supported.
I am having difficulty finding logs and other troubleshooting information for Authentication Portal on PAN-OS 10.2. There are some resources such as this article but it seems to only be useful for older PAN-OS versions where the feature was still called Captive Portal. If I try to use some of the things that it describes: > less mp-log appwe...
Raido_Rattameis
reaper
on:
VPN with two subnets
TomYoung
on:
Device Security license
reaper
on:
No proposal chosen ikev1
