General Topics
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics

Forum Posts

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...

jdelio by Community Team Member
  • 18326 Views
  • 41 replies
  • 32 Likes

Resolved! Granular URL Monitoring

I want to be able to grab full URLs when specific sites are visited e.g. github so I can see what app/repo is being hit. Right now all I get is the domain. How granular can URL monitoring be? Can I get a full URL from URL filtering or URL category hi...

mike406 by L2 Linker
  • 2068 Views
  • 6 replies
  • 0 Likes

confused with PA-220 licensing and features

im having difficulty understaing the licensing on palo alto , from the attached pictures do i have the anti-virus , vulnrability protection , anti-spyware , url filtering , file blocking , data filtering and wild fire? or does each of them need a lic...

licenses.PNG
chuckles by L2 Linker
  • 1691 Views
  • 3 replies
  • 0 Likes

PA-5220 Decryption Performance Degradation

We have a cluster of PA-5220 firewalls with SSL decryption activated. When initiating a communication across the firewall using a decrypted protocol (scp, HTTPs, etc.) we get 5x slower connections compared to the unencrypted versions of the procotol....

Mitigating CVE-2019-0624

HI @reaper , @gwesson I'm seeing the subjected CVE is missing in palo alto vulnerability profile. How can I mitigate this vulnerability. https://nvd.nist.gov/vuln/detail/CVE-2019-0624RegardsVenky

Dynamic update release date

Hi Community, Hope somebody can address my below query.I am able to see the Release date of App&threat version 8146-5421 as 2019-04-25 UTC in both threat vault and support portal( is it actually UTC time??, i am seeing 1-day gap here !),But my firewa...

release date in firewall.PNG
Threatvault.PNG

Resolved! PA HA failover and IPSEC connection shows inactive

Yesterday during PAN OS upgrade when Passive PA became active I saw that our IPSEC connections stopped working. CLI shows status as inactiveI did clear vpn commandtest phase 1 and phase 2 still samething. Only way to make this work was via restarting...

MP18 by Cyber Elite
  • 3594 Views
  • 6 replies
  • 0 Likes

Resolved! Passive PA and IPSEC Connections

We have PA in active passive mode, We have ipsec connections going to end devices.When i check the passive PA GUI I see All Phase 1 connections as redAll Phase 2 connections as green IS this normal behaviour?

MP18 by Cyber Elite
  • 1046 Views
  • 3 replies
  • 0 Likes

Resolved! allowing and denying ip address traffic on VWIRE?

i have a core switch and a router which connects to other router to reach the internet , i was wondering if i put the palo alto as a VWIRE between the core switch and the router would i be able to control which ip addresses can go to the internet and...

chuckles by L2 Linker
  • 724 Views
  • 1 replies
  • 0 Likes

Resolved! managment port importance?

this is my first time deploying palo alto , is it important to have the managment port connected? does it play important role in the device function or is it just solely for managment?like can i manage the device from the inside interface only?

chuckles by L2 Linker
  • 797 Views
  • 4 replies
  • 0 Likes

How do I make a feature request for GlobalProtect?

I'd love it if the last Gateway I used was the default on my list instead of Best Available. Or if this was an option that I can turn on. If I am on a different network, perhaps it makes sense to default to Best Available, but it never picks the best...

calasyr by L1 Bithead
  • 1424 Views
  • 12 replies
  • 0 Likes