Hi all,Want to reset MFA for user who is Managing Cortex XDR admin console. Since am the Super user & Account admin but still unable to find the option to reset MFA. Please help us with the options and steps.
Hi All, Just saw three options (Validate Export and Reinstall) altogether under Device>Software (action tab)for PA 820 for PAN OS 10.2.0 . (I can see other versions also have the same 3 options) (apologies for the blurry pic) Wondering if this is normal or any action is needed as I do not see this on other FW-PA 440 as pictured. Thank you i...
Hello all! Im gonna upgrade Panorama + a bunch of vms from 10.1.0 to 10.2.x. On the path up to 10.2.x, do i need to stop at 10.1.8 before upgrading to 10.2.x? Or can i just take a leap from 10.1 to 10.2? Also, running Panorama at 10.2.2-h2 and vm's at 10.1.0, will that cause any issues? Or would that be problem free? I expect to run like this...
Hello, Originally on our PA-3250's we used Source with Bi-Directional NAT and just added in the trusted zone(s) to the security policy for U-Turn NAT to work, and this worked flawlessly. Now we upgraded to 10.1.6 from 10.0.10 and it stopped working. We were able to get some sites working with a new U-Turn NAT statement as mentioned in the arti...
Hi,Is there a way to see QOS statistics users tab for a class from cli ?Thanks.
Greeting Team! I noticed some problems with a downgrade in my internal lab. So, some information: I want to downgrade from 10.1.7 to 9.1.1 (i need it for the experiment). 1st step i downgrade from 10.1.7 to 10.0.0, everything fine. But, when I want to downgrade from 10.0.0 to 9.1.1 I faced an error with: Upstream NAT not supported on 9.1.1, plea...
I have blocked WhatsApp on my laptop but not blocking on my mobile. My laptop going to authenticate throw the Active directory. Also, my mobile wifi going to authenticate throw the Active directory but on mobile WhatsApp not going to block please suggest.
Due to the Void-19 situation and users having to work from home. My company want to reduce bandwidth Utilization by excluding Zoom traffic through global protect. the I.T team has decided to exclude zoom by configuring the "Exclude Client application process name" and adding the path in windows program file for both Win10 and 7. C:\Program Files...
Looking for the better idea. User reported xyz.com site is not working, When I look at the firewall logs xyz.com was allowed in firewall. And I filtered the logs with source IP for 5mins time frame and found deny logs for particular IP address 1.1.1.1 I am not sure what is the url for 1.1.1.1, In such case what you will do to find the URL for 1....
Hi Team! I'd like to ask about QoS Guaranteed Egress, because I'm not sure I understand the topic well. (used devices PA-220 and VM-100) Here's what I need to do: My branch office bandwith is limited by the ISP to 30Mbit/sec (ethernet1/1 WAN interface). I need to shape traffic to guarantee some bandwith to different kind of traffic classes...
NOTE: the freeware pfsense firewall can configure a working VPN with user passwords and user certs (2FA) inside of 20 MINUTES. With Palo Alto Networks, I'm on WEEK 6. Where I am at:1) I have GlobalProtect working with password auth. (Had to call tech support, who knew what steps were missing from the documentation.)2) I want to have 2FA: so, I s...
hello friend, nice to meet you, I wanted to see if anyone knows if the PAN 3220 with Pan-OS 9.1 supports the OIDs to know the operating status of the power supply and the FAN
Does this document below apply to PAN-OS 10.x.x or just for <9.1 Where Can I Find a Complete List of PAN-DB URL Filtering Catego... - Knowledge Base - Palo Alto Networks We are trying to block URLs on both 9.1.x & 10.1.x, but it seems there are URL categories on the document that are not available for all versions of PAN-OS. We implem...
After installing a new PAN-OS and going to Device/Software tab, it's blank. Nothing there, not even the old PAN-OS. Any help is appreciated.
Hello Team, Please let me know is there any way to allow particular file name . Example:- I want to allow for all user that they can download test.txt but i want to block all other .txt file.
