Hi, I was checking the useridagents in the typical site (DEVICE-USERID->AGENTS) in version 10 and i can not find this tab. how to configure a new userid agents in version 10 and later?
Hi everyone, When we add our firewall to panorama, we faced with some issues. Access problems occurred due to LDAP profile password and PSK in IPsec tunnels. We had to back to our old configuration and delete firewall from panorama. As we know there are major difference on their versions but all goes by book. I will mention the versions below. A...
Hello everybody, perhaps this is a silly question, but... This morning I received a bunch of emails from "[email protected]" saying that I've earned some badges from Palo Alto Networks. Inside the messages I can find links to "accept" my PCNSE, PCNSA, PSE, etc. badges. The strange thing here is that I got my PCNSE and PCNSA certifications ear...
Hello, Recently I got error below on PA 850 device(8.1.13)-User Group count of 1098 exceeds threshold of 1000 The log is straight forward, number of group is exceeding the limit, but I have some question. 1. I have one more device,PA-3220, which look same LDAP for group mapping(same configuration).I found article about this and it says FW has li...
We've published GlobalProtect 5.0.5 I added some Exclude Domains and Applications to our Gateway's Split-Tunnel configuration over the weekend. Afterwards, about 5-10% of our VPN clients can not access these domains at all while on VPN. The domains work fine when disconnected. We've had reports of problems with Mac and Windows, but all of my ...
Dear Team, I checked the following log in the system log. > disk usage for / exceeds limit, 95 percent in use, cleaning filesystem However, when checking with the 'show system disk-space' command, the free space is checked as shown below. I know that if the disk capacity is full, it is necessary to take action through the 'debug softwa...
I recieved this system alert every 10mins. Redistribution Agent UserID(vsys1): details: close connection to agent Please help. Thanks. Rey
I would like to add a 24-port switch to each Palo. To maintain HA redundancy, I just have to run the HA Control across the switches right? Does the Session Link have to go through the switches too?
Using this image for labbing on EVE-NG pro and i cannot create a working active standby cluster as both instances of the node that i created have the same serial number, is it possible to change the serial number of the node upon creation? what is the solution? i do have 9.1.2 which might work for clustering but this is the only 10.x image i h...
Are the Global protect agent is compatible with windows 11?
Config changes retention in Palo Alto For non root user with read only admin access Hello All, I have recently come across the issue of read only admin access config change 10-15 days back but same not reflecting in the commit when I checked. So, my main query is that for many days the changes will remain as it is in commit for read only adm...
We have had overlapping subnet scenarios where someone is connecting using GlobalProtect Cloud Services from a subnet that overlaps our internal subnet and, as they have a more specific route, access to internal resources is failing as the taffic is being routed via the local router instead of over the VPN due to the more specific route. Due to ...
Can I add On-Site Spare PA-440 firewalls with ZTP? Thanks
Hello, I have a question about the mechanism of TCP session timeout on PA FW. Assuming that default TCP timeout on PA device is 3600 seconds. What happen after a TCP session is idle after 3600 seconds ? Does the FW send TCP RST at each endpoints ? Or does it just delete the session from its sessions table ? And in this case if a new packet is se...
Our vulnerability scanner has detected a weak KEX algorithm (diffie-hellman-group1-sha1) on our firewall. Is there a persistent way to disable the weak KEX algorithm? I found this article (below), but it says every time the firewall reboots the weak algorithm becomes enabled again.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=k...
Raido_Rattameis
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
