I'll be darned if I can find any documentation that speaks to if/how interfaces are configured to fail closed if there's a system or interface issue. Does anyone have a URL that talks to this? Thanks, Jeff
Are there any updates as to if/when PAN will support DHCPv6 Client and IPv6 Prefix Delegation? This is preventing a purchase for me. Without the ability to receive an IPv6 address and prefix delegation dynamically on the WAN interface, this is a show stopper.
Trying to get bluecoat proxy to send its access logs to windows user-id agent. configured custom log on bluecoat in the following format PAN Source=$(c-ip) Username=$(cs-username) Action=$(s-action) On user-id agent side I am seeing server receiving syslog messages in the format specified PAN Source=x.x.x.x Username=usernamexxx Action=TCP_HITPAN...
Hi, i am new to palo alto and firewalls really. I have been tasked to be able to make a script which automatically can change the password on a palo alto firewall. Is it possible to do this by creating a new config file with a new password and then upload to the firewall?
In the global protect gateway settings where you can select the priority by region does the firewall block connections from any regions that are not included there? this is the article discussing the feature I’m referring to: https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-new-features/globalprotect-features/external-gateway-priority-by-sour...
I need to enable user-id on panos sdwan zones - e.g. zone-to-branch. I can enable it in the template on panorama, but it doesn't change on the firewall when pushed. Everything else is working fine, so this is not and template/stack issue. Is this a sdwan issue or work as expected?
Just trying to understand the policy a bit more. under the policy | application, if I select FTP and select http/s under the service, I assume fw is expecting FTP to run on port 80/443? hence, if I select app default on services, it will then expect the ftp traffic on port 21? what I was looking into allow ftp/http/s. I end up creating 2 poli...
In an AWS environment which is making use of the TGW and GWLB, is it okay to deploy Panorama in a VPC that gets routed through GWLBe or should Panorama get deployed in the security VPC and have the route tables bypass all gwlb endpoints? I'm wondering if having panorama go through gateway load balancer endpoints would cause issues. The pano...
Qn : If the Global Protect HIP Check have Multiple Antivirus and Real-Time protection enabled. Will it be a AND or OR check for each Antivirus? Because in a system Real-Time protection works only for one AV.
Dear Team, I know that sessions are synchronized except for the conditions below in the A/P configuration. -In Active/Passive mode, ICMP and host sessions are not synchronized between peers.(Note: A host session is a session terminated on one of the firewall interfaces, such as an ICMP session pinging one of the firewall interfaces or a GP t...
Many government sites are not opening on paloalto networks. Same is opening on outside network. Please suggest
Hi, I am facing the common issue of Passive FTP (over TLS). Basically, the connection fails due to the dynamic ports assigned in the encrypted channel. It is clear that the solution is to configure PA to decrypt the traffic to identify the dynamic port and PA automatically (and temporarily) will open the traffic for that port. But unfortunately,...
I have a physical firewall and want to change the password on an admin by the use of XML API. I have followed the guide from How to Change the Password of Administrative Users via XML API - Knowledge Base - Palo Alto Networks and everything works and ends with success. However, when I try to login with the new password it does not work. And neit...
Do the HA ports come up even if HA isn't enabled? I have a production 3220 I am trying to add a new 3220 to and before I enable HA I wanted to make sure the HA ports were up and working before I flip the switch. The HA ports are showing down and the onsite contact said they are connected directly to each other and the chances that both have ...
Hi, The Clientless Portal is now displaying a blank page after a software upgrade (from 9.0.9xfr to 9.1.15). The developers say that the javascript minification process is no longer working and no longer pushing data into the Pan_js module for it then to be passed back to the portal. Has the update caused this? What is the fix? TIA
PavelK
on:
Replacement of RMA
