I am preparing for the PCNSE. The link to the CyberSecurity Practice Lab does not work. Can someone point me to the new location or an updated link? Thank you
Greetings! Running Pan OS 10.2.3-h2 Is it possible the have DHCP on the WAN interface, Nat inbound traffic to a loopback interface that allows management? The inbound security policy would restrict access based on set of FQDNs
Hi Team, Why do my Panorama Security logs show Apps Seen as Zero??
Hello, all. I'm trying to determine how many address objects and object groups I have across all of my VSYS on one of my platforms. I found the command to show the maximum allowed (see below), but not one that shows how many are currently there. Is there a command like this, or does anyone know of a way to do it that doesn't involve manually cou...
All of my PA firewall is running PAN-OS 8.1.15-h3 and facing this issue below. Anyway, they are able to send log to Cortex Data Lake How can I resolved this error?
I am trying to whitelist some IP addresses. I added the IPs to our allow policy in the URL category section. Is there anything else that I should be doing? The purpose of this is to allow our printer providers servers so our printers can communicate with their servers. Thank you!
Hi, I have an IPSec Tunnel between a remote central site and a PA-220. This tunnel advertises it's remote internal network in 10.100.10.0/27. A static route has been created in the PA with a metric > 1 (10), to route traffic in direction of 10.100.10.0/27, through the IPSec tunnel interface, tun.254. This route is effectively worki...
Dear all, I am designing a new network for a client and they have lots of zones. my idea is to create an aggregate interface (ae1) and create sub-interfaces for the individual zone. I read aggregate interface can be done on SD-WAN level and could not find any documents related to my design (Not SD-WAN). However, I found this post https://live....
Greetings Programs, We have a client that is an engineering firm. They have a few remote engineers and we are starting to see issues with Civil3D 2023(AutoCAD). Majority of these end users have Windows 11 OS with Global Protect installed on it to VPN into the office to access a network shared drive. When the end users open Civil3D 2023 (AutoCA...
Hi, We have this fqdn object created: 2021-01-08 12:26:14.872 +0100 dnscfgmod: Fqdn SIEMENS OWNCLOUD SERVER/cco.siemens.com could not be resolved If i run a ping from MGMT A interface is resolving:ping host cco.siemens.comPING cco.siemens.com (212.231.11.154) 56(84) bytes of data. The DNS is OK, reachable, and resolving. If i go to the web and c...
Hi, We have a panorama M100. Panorama is showing logs but suddenly stop doing it. We can not see any logs until we restart logd proccess or appliance. Panorama version is 8.0.8 Why is this happening?
Can you please help me clarify the new real-time-detection category, which is covered by the URL filtering license? According to the article the Advanced URL filtering "real-time-detection" URL category is not a classification by itself, but a real time inspection, which can return either Benign or as one of the risky category types, e.g. Pa...
Is a user able to update their password (when its expired or a force change is required) in Global Protect when using SAML Azure AD authentication? There is this older document saying its possible when using Radius with PEAP-MSCHAPv2 authentication but I'm wondering about SAML. Expired Active Directory Password Change for Remote Users (paloalt...
If I install a new certificate why does the root certificate have to be installed as well with it (well that is what I saw on a demo) ? I thought the root certificate was needed more on the client side or other firewall connecting to the one I'm referring to. I may be misunderstanding something. Also I will be requesting new certificates to r...
Hi all, I am running Cortex XDR and when I click on the all end points, I can see the endpoint device like PC and server. I have install the endpoint agent on those PC and server. They are Domain joined PC and server. How can I install this Cortex XDR agent on mobile phone? and second question is can we install cortex XDR on home PC which is not...
