Hi All,I need to send DHCP option 119 to my clients that are using the Palo Alto as their DHCP server.Please can you confirm whether this is possible or not? Thanks,Jaggie
Hello All, My current management IP is set to a private IP and is up and pingable from the PALO ALTO command line. How ever I cannot log onto the management IP via WEB GUI... Does the management interface correlate to the physical management port on the palo or is there someway to connect to the management IP from a different network? Or c...
Replacing 2 Cisco M400 firebox with PA-450, mirrored the NAT and security polices from the M400 onto the PA-450. When we switch over the firewalls we get internet traffic both ways as expected but after 15 minutes all in and outbound internet traffic stops. Switch back the Cisco routers and traffic flows normally again, swap back the the PA-450 ...
Hi, Since updating our firmware to 10.2 we have noticed that ha1 shows down in our monitoring tool but is showing as up on the device. Has anyone seen anything like this before? This is on multiple devices and has not effected the PA-800's. Thanks Luke
Can someone step me through exactly screen by screen using this info how to change this block-continue to an allow?
I noticed that the “opcmdhistory” log disappeared in Panorama after upgrading to PanOS9.1. It was there in 9.0 and previous versions. Do you know why it changed and if the information is in another log file?I was using it for troubleshooting and detecting cli commands executed by other admins, API calls, etc.
We can set the following actions for URL filtering categories: The URL filtering logs show the following possible actions: alertblock-urlcontinueblock-continue The first 3 are clear and relate to the action we set in the categories. Can someone please explain the "block-continue" action?
Hey,I have a customised login page for when users connect to the GlobalProtect VPN and it frustratingly doesnt fit on the screen. I would like to know whether the Notification window can be resized and grow to a larger size than the default.
I m setting up a small office network where the endpoints are connecting to a switch that is in turn trunked to a PA220 Firewall . The firewall external interface is configured with a static IP address within the same range as the ISP IP router . However it appears that neither the ISP router or the Palo can receive arp entries off each other le...
Hi Folks, I have quick question. If I want to do some home lab for learning purposes for example with eve-ng , how I can get PA-VM image I applyd for 30days trial, however for unknown reason I was rejected After our evaluation of your application, we are unable to supply a trial product download due to Trade or Legal restrictions. 1. I'm from ...
Has anyone had sucess in the PAN-Agent capturing logins for Mac OS X clients joined to Active Directory?We have about 100 iMacs running Mac OS 10.6.5, and I always get a "_unknown_" username when looking at their IP address in the PAN-Agent. We have a Server 2008 R2 domain controller.
Just wondering how others are monitoring large FW/Panorama footprints for things like license expiration, hardware failures and so on. Thanks in advance for your time.
Hi All , We did not set decryption policyBut in the threat log, it is seen that decrypt is yes, and the traffic is wan to wan. Under what circumstances will the log of wan to wan decrypt is yes be generated? thanks
Hi, Does anyone know how you can remove an asset (PA-200 ) from your account ( unregister a device )I like to remove the devices from my account that I don't use anymore. kind regards Frederik
Hello, We have a offshore Palo Alto firewall that recently we noticed the details under the Network tab and Device tab is not showing on the GUI. But on the CLI the details are there. (ip address, settings etc) and the firewall is still operational have you guys encounter this before? for your advice.
Raido_Rattameis
PavelK
on:
Throttling ingress bandwidth on a sub-interface
