I'll go first. At least 45 minutes.
I have a question about static routes for subinterfaces for my ethernet1/2 interface, I currently have static routes for interface ethernet1/2 to access some remote servers, but many of my subinterfaces of ethernet1/2 also need the ability to access these remote servers. Do I need to create a static route for each subinterface (Example Ethernet1...
When I try to import such certificate I get "Only self signed CA cert can have identical sub and issuer fields" error. The certificate is not from CA server so I don't have "Back up CA" option as described here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004NUhCAM I'm aware of this discussion but it's for SAML an...
Hi, my firewall is set to send PDF reports daily, attachments are usually not visible when receiving emails using Outlook. Studying the source code of this email found that Outlook can display attachments normally as long as the = string is removed. Will the original factory fix this bug? PAN-OS 10.1.6-h3Please note you are posting a publi...
I couldn't find a way to post a support ticket so I'm going through this section first. If you have any solutions to send an official support ticket, please let me know. Besides that, the base problem I am having is I cannot retake both "Introduction to Cortex XSOAR" and "IT Administrator Training" Assessments. I failed my first attempt for di...
We want to modify the HA Passive Link from shutdown to auto on production firewalls. I suppose it is a pretty straighforward change, but I would to confirm if there is something which we should keep in mind. Something like applying first in the passive firewall and commit, and then on the active firewall and commit. Or if it is only necessary to...
Hello, we have been registering this message on our Palo Alto Firewall in the system log since 9:20 p.m. Central European Time. Does anybody else have this? Thank you. Best regards.
Have 2 radius servers, 1 is used for admin login and is accessible only via the management interface, and another radius server is used for global protect authentication and is accessible via another production port. Tried to configure custom service routes on destination IP, which are not able to make them both work at the same time using cu...
Hello all, I am facing an issue with deploying master key in PA-450 firewalls (HA – active/active), I replaced 2 PA 850’s with two PA 450, also in HA. After Changing the masterkey was tested on the PA-850s prior to being performed on the PA-450s through panorama. After the masterkey change in PA 450 the app version, threat version, antivirus v...
Hi All, I am hoping to build a lab environment to fully learn the palo alto firewall and I wanted some recommendations on the most cost effective way to achieve this. I already have some physical cisco gear (switches, routers) however I'm not against going virtual. Is there any lab offerings with some test licenses which I can obtain? All su...
Hello All, i have 2 Firewalls configured in HA Active Active. I have a L3 sub interface created on each firewall and a vitual address configured as IP-Modulo arp-load-sharing. ex: FW1 (primary): 192.168.0.2/24 FW2 (secondary): 192.168.0.3/24 Virtual IP (ip modulo): 192.168.0.1/24 zone: trust a management profile is configured on both FW1 and...
I have seen some older posts with no updates on this very subject so I thought I would start a new thread. I am testing SSL decryption from a couple of workstations and have almost all of the traffic being successfully decrypted. We are a Google suite user with it being our email provider with our own domain. I am on a mac and when using Chro...
Hello everyone, why is paloalto os 9.1 next is 10.0 not 9.2? 10.1 Next is 10.2, not 11.0? I wonder what it means. Thank you in advance.
I'm looking for experiences and suggestions. We're subject to SOC2 / ISO27001 audits, where the auditors want to know what has been changed in a firewall configuration or rule set. Specifically things like "what rules were added, changed, or deleted in the last year?" or "what configuration options were changed last year?" The challenges we're r...
is there slack channel for minemeld ?
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
