General Topics

EDL error web request failed to complete, error:28

Using EDL provided by https://saasedl.paloaltonetworks.com/ but getting error web request failed to complete, error:28Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Resolved! URL Overide SSL Cert

Palo Team, For URL override, do you need to use an SSL Cert signed by an internal CA? Or can I use an SSL from a public authority like Go Daddy? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRdCAK

Change the SSL/TLS server configuration to only allow strong key exchanges. Key exchanges should provide at least 112 bits of security, which translat

Ho w to disable Weak SSL/TLS Key Exchange on Palo Alto Firewall while connecting with Globa lProtect VPN

Resolved! suspicious user account and file in my system

Is this BOT or not ? # cat /etc/passwd | grep trapsanalyzer1trapsanalyzer1:x:993:990::/home/trapsanalyzer1:/usr/sbin/nologin # chage -l trapsanalyzer1Last password change : Jul 13, 2020Password expires : neverPassword inactive : ne...

Is Palo Alto firewall vulnerable to CVE-2022-42889 (Apache Commons Text Code)?

Hi, Is Palo Alto firewall vulnerable to CVE-2022-42889 (Apache Commons Text Code)? Regards,BK

Resolved! PA-460

Hi Team, Please share me the EOL and EOS link for all the device models. I dont see the model PA-460 in the below link. https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates Regards, Sanjay S

After firewall upgradation to 10.2.1 packets are dropping and outage

SSL Decryption Exception - Password Managers

Has anyone setup an SSL Decryption exclusion list for Password Managers (i.e. BitWarden, LastPass, 1Password, etc)? If so are there any tips or resources you could point to.

Palo Alto BGP: Conditional Advertising

Dear All,Recently we have been migrating to a non-trivial BGP setup, and I have had to experiment with the conditional advertising BGP feature in Palo Alto. I was familiar with this concept from cisco, but alas I still found the documentation available on this feature to be a bit unclear and lacking. So, I've written a how to with a step - by - ...

HA Active/Standby HA-1 and HA-2 Ip addressing

The training videos say HA1 1.1.1.1 <-> 1.1.1.2 HA2 2.2.2.1 <-> 2.2.2.2 do there addresses ever get place in the Routing table , RIB, VRF or Vwire? I wish to avoid any issue where people cannot route to cloudflare 1.1.1.1 or other conflicting presence on the internet. I want for best practice every firewall I build. have si...

Policy Based Forwarding is not working for Secondary ISP

We recently added a new Internet link to our PA-3020. We want only one server (10.1.12.130) to use it, so we configured the new internet link interface as layer-3 , assigned it a static IP, created a PBF policy that basically specifies the zone (internal) and the source IP (10.1.12.130) and the destination is any (negate 10.0.0.0/8) and the ac...

Data Filtiring logs not Show on GUI

I got a problem with showing logs. In past I got problems with threat and data filtering logs, they are simply not showing on the monitor tab. I clean some space from the disc and upgrade pan-os to next version, threat logs start working, but still no data filtering. This problem is on 2 VM firewalls. I cheack root partition (30 percent availab...

Panorama Log Retention Command

Hi, I am running the command to show the Panorama log retention details on a Panorama M-500 'show system logdb-quota' This doesn't show me the retention of traffic, threat logs etc: user@PAN-PRI(primary-active)> show system logdb-quota Quotas:system: 25.00%, 17.755 GB Expiration-period: 0 daysconfig: 30.50%, 21.661 GB Expiration-period:...

Threat Map Clarificatiion

Are these threats that show up on the map active or stopped attacks? Is there any logs of what exactly happened?

VPN IPSec con 2 IP de destino diferentes, igual dominio de cifrado

Hola, Alguien sabe como puedo configurar una VPN IPSec con 2 IPs de destino diferentes y con dominio de cifrado igual, que cuando una de las VPN IPSec deje de funcionar la otra se active ?, es decir que una de las VPN IPSec estará en espera.

Discussions

EDL error web request failed to complete, error:28

Resolved! URL Overide SSL Cert

Change the SSL/TLS server configuration to only allow strong key exchanges. Key exchanges should provide at least 112 bits of security, which translat

Resolved! suspicious user account and file in my system

Is Palo Alto firewall vulnerable to CVE-2022-42889 (Apache Commons Text Code)?

Resolved! PA-460

After firewall upgradation to 10.2.1 packets are dropping and outage

SSL Decryption Exception - Password Managers

Palo Alto BGP: Conditional Advertising

HA Active/Standby HA-1 and HA-2 Ip addressing

Policy Based Forwarding is not working for Secondary ISP

Data Filtiring logs not Show on GUI

Panorama Log Retention Command

Threat Map Clarificatiion

VPN IPSec con 2 IP de destino diferentes, igual dominio de cifrado

Doubt about Custom URL category

Upgrading from 10.2.9-h1

Can 'admin' account be deleted?

NGFW with two different Support Structure in one CSP

[User-ID HUB Vsys] Solved Issue User-ID Behavior

Re: Doubt about Custom URL category

Re: GlobalProtect is no longer able to retrieve information for Trend Micro Apex One Security Agent

Re: Convert management-only Panorama to panorama-mode

Re: GP Always-On disconnect with comment logs

Re: SIEM posting Botnets , but Firewall do not

Unlock your full community experience!

Resolved! URL Overide SSL Cert

Resolved! suspicious user account and file in my system

Resolved! PA-460