Will blocking Internet Explorer from internet access also block MS Edge in IE mode? If so, is there a way to allow Edge in IE mode but still block Internet Explorer?
Hello Community!We need to change a URL that is tagged under Computer and Internet while it is dedicated to Health ad Medicine and should be tagged accordingly. Our vendor can't access our site as their firewall is blocking anything that is not under Health and Medicine. I have followed the process to make a Category change request (as per exist...
Hi I have 2 questions. 1. I want to create an IPSec tunnel, using a loopback interface. This removes a dependency on the main interface ip. ie if the loopback ip is :3.4.5.2, and the main internet ip is changed from 3.4.5.1 to 3.4.5.30, this then doesn't impact the IPSec tunnel. After the IPSec tunnel is online. 2. I want to NAT the communic...
We recently upgraded to 10.1.5-h1 and it appears after the upgrade the Windows-Remote-Managment traffic over tcp5985 is now being identified as Web-browsing. This is causing that traffic to drop. We checked dynamic updates and presently leveraging the latest update released on 5/16. Seeing if this is a growing issue?
Hi everyone, i'm having an issue regarding the device certificate on a pa-440 panos 10.1.6-h3 at the moment i am getting a a message device certificate not found. but u don't have any options to get a new one in the GUI. is there a way to trigger the check for a certificate in the CLI ?
Hello When apllying a rules in PA I get the warning message re shadow rule.I have two rules where rule 1 allows SSL between source and dest on standard SSL port rule 2 allows SSL between the (same) source and dest on a non standard SSL port I get a warning about rule 1 shadowing rule 2 How can I combine ther two rules so that I do not get that...
Hi all, I can't find RAID menu in maintenance mode for 5430 appliance. It definitely was earlier (at lease in 5200 series) so I was able to copy data from old SSD to a new one. even in the guide there is instruction for this RAID menu option (step 11 in the link below) https://docs.paloaltonetworks.com/hardware/pa-5400-hardware-reference/service...
I have read through a number of URL category issues, but I just cannot find something like this and I am baffled so far. I have two users, inside and outside, that access a certain internal webserver. What I am trying to do is the following. outside: allow: a.b.com/sites/outside and a.b.com/sites/common block: a.b.com (the rest of the site) insi...
Netflow is not working after upgrading to the 10.1.6-h6, is it something know issue in the 10.1.6-h6 PAN-OS version? Firewall- PA-3220 I have checked the NetFlow statics and seen that the firewall is sending the NetFlow log. for reference, I am also attaching the TCP dump snapshot. Can someone advice me please
hi, i have issue with Maintenance mode when connected to my macbook (Catalina MAC-OS--micro usb), is not responding to any keyboard keys even when i set the baud rate manually (9600) but it working ok when entering normal console (no issue with keyboard keys) anyone facing the same?
Hi everyone, Can I check for Prisma Access HIP object for Disk Encryption with BitLocker with the option to check encrypted location (eg C:, D:) is Encrypted?Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not rec...
SSL decryption Policy question, how can I know that traffic is hitting a configured decryption policy ?There's nothing in the Monitor Tab for decryption policies, nor can I get anything out of the CLI command "show log traffic rule equal DECRYPTION-RULE-NAME" , any ideas ?
Model: PA-450 We cannot connect remote VPN from outside of our network by using public IP but connect from the internal network by internal private IP of the PaloAlto direct interface IP. Note: PaloAlto firewall is running behind our internet router.We just port forward to the PaloAlto VPN gateway private IP of interface from our internet r...
I'm attempting to use a PA-440 in vwire mode to inspect traffic that is on the internet side of a broadband modem for security analysis. The traffic passes through the PA ok but non of the security policies seem to be triggered and no traffic logs are generated. Does anyone know if the Palo Alto firewall will inspect traffic that contains a PPPo...
Hi guys, I have a beginner's question I'd like to ask. I want to set up my own home lab on VMware workstation 16 and something doesn't add up. First, my simple network topology is the following:My home network is on a 192.168.1.X network (default gateway 192.168.1.1) .I have a PA-VM 10.1 with a management ip of 192.168.1.222 (default gateway 192...
