After firewall upgradation to 10.2.1 packets are dropping and outage
Has anyone setup an SSL Decryption exclusion list for Password Managers (i.e. BitWarden, LastPass, 1Password, etc)? If so are there any tips or resources you could point to.
Dear All,Recently we have been migrating to a non-trivial BGP setup, and I have had to experiment with the conditional advertising BGP feature in Palo Alto. I was familiar with this concept from cisco, but alas I still found the documentation available on this feature to be a bit unclear and lacking. So, I've written a how to with a step - by - ...
The training videos say HA1 1.1.1.1 <-> 1.1.1.2 HA2 2.2.2.1 <-> 2.2.2.2 do there addresses ever get place in the Routing table , RIB, VRF or Vwire? I wish to avoid any issue where people cannot route to cloudflare 1.1.1.1 or other conflicting presence on the internet. I want for best practice every firewall I build. have si...
We recently added a new Internet link to our PA-3020. We want only one server (10.1.12.130) to use it, so we configured the new internet link interface as layer-3 , assigned it a static IP, created a PBF policy that basically specifies the zone (internal) and the source IP (10.1.12.130) and the destination is any (negate 10.0.0.0/8) and the ac...
I got a problem with showing logs. In past I got problems with threat and data filtering logs, they are simply not showing on the monitor tab. I clean some space from the disc and upgrade pan-os to next version, threat logs start working, but still no data filtering. This problem is on 2 VM firewalls. I cheack root partition (30 percent availab...
Hi, I am running the command to show the Panorama log retention details on a Panorama M-500 'show system logdb-quota' This doesn't show me the retention of traffic, threat logs etc: user@PAN-PRI(primary-active)> show system logdb-quota Quotas:system: 25.00%, 17.755 GB Expiration-period: 0 daysconfig: 30.50%, 21.661 GB Expiration-period:...
Are these threats that show up on the map active or stopped attacks? Is there any logs of what exactly happened?
Hola, Alguien sabe como puedo configurar una VPN IPSec con 2 IPs de destino diferentes y con dominio de cifrado igual, que cuando una de las VPN IPSec deje de funcionar la otra se active ?, es decir que una de las VPN IPSec estará en espera.
If I access the log4j related link below, it is confirmed that it has been updated to PAN-OS 10.1 version. URL : https://security.paloaltonetworks.com/CVE-2021-44228 I would like to know if PAN-OS 10.2 is also affected by log4j. If anyone knows about this information, I would appreciate it if you could share it with me. Thanks in advance...
Dear Team, Any documentation or information regarding dipp nat pool duration time? I would like to know how much the previously allocated IP:Port is maintained. If anyone knows about this information, I would appreciate it if you could share it with me. Thanks in advance,Kyungjun,
I'm looking at buying a pair of PA-820's. The intention is to have them in an Active/Passive setup. One thing I haven't been able to get a clear answer on though is if the predefined copper HA1/2 ports are the only option on the 820 or if any interface can be configured for HA. I've seen videos of the port configuration for other models.
Hi, I'm trying to setup DynDNS based on the instructions found at https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/configure-dynamic-dns-for-firewall-interfaces.html I'm using DuckDNS, but I'm stuck at the 'certificate profile' portion. As I understand it correctly I have to import the (public) SSL certificate of DuckDNS, bu...
Hi, Is it possible to delete to dowload the GP Agent for MAC from GP portal???? We only want client for Windows in GP portal thanks
Hi I need to deploy Palo in active passive in AWS cloud I was planning to use vm 100 with C5 large instance type 1. Does this instance type only give 3 network interfaces max? Thanks
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
