Join us live for an in-depth look at the latest advancements in cybersecurity, best practices, tips and tricks, demos and
more to protect your business and defend against threats in real
I am not able to find any of the vendors in the industry that supports EAP on top of PAP. Like EAP-TTLS with PAP that which Palo supports though.
Did you know any vendors supports EAP-TTLS with PAP for Firewall Admin authentication ?! NOT for global p
Hi Team
In sec policy I have allowed for some users only RDP and SSH application. But these users are able to use WINSCP application because WINSCP application also using port 22. I want to block winscp application but allow ssh application. How can
...
hey all,
I've deployed SSL inbound inspection, connection gets really slow when SSL Inbound Inspection.
It takes almost one minute for the page to be loaded. Without SSL it takes 2 secs.
Would any of you have a clue what could be causing the problem?
...
Hey,
Is it possible to set up either a warning page or auto email to the specific user when trying to access a blocked site, currently it just doesn't load and wonder if I can set up a notification to the user that the following page is not allowed?
Hi everyone,
I have a list with more than 50 mac addresses, I want to configure PA DHCP Server to reserve IP addresses to these MAC addresses, is there an easy way to make reservation instead of enter these 50+ records one-by-one? Thanks.
Regards,
Dan
...
To all,
I have multiple tunnels on PA 850. It was difficult to see through which tunnel specific traffic was sent. I tried "show vpn ipsec-sa" it gave me only Peer IP addresses but not proxy-IDs ( interesting traffic permitted through tunnel).
is the
...
Please help me figure out how to allow SSH access for certain IP addresses on PAN firewall.
Thanks,
Roopa
Hello Folks,
We are currently leveraging Cisco's IP Communicator platform to allow VOIP to our user via softphone. The scenario is as follows:
1. User logs into a ASA VPN gateway using Cisco Any connect, the ASA is located in an AWS environment.
2. Th
...
Hi All,
I followed the same steps as in the ytexample guide.
https://github.com/PaloAltoNetworks/minemeld/wiki/How-To-Write-a-Simple-Miner
Including putting my class in:
/opt/minemeld/engine/0.9.68/lib/python2.7/site-packages/minemeld/ft
By the
...
Hello everyone,
I'm looking to purchase a PA-850 for my home lab but after doing some research I have some concerns.
I was planning on buying an 850 on eBay then getting the lab PAN-PA-850-BND-LAB4 through a VAR but I think I will have issues. Based
...
Running configuration sync is not happening between HA peers(PA-5050). We tried manually from Passive firewall CLI by the command request high-availability sync-to-remote running-config but I are getting the error Server error: Failed to synchronize
...
Team,
Below Advisory mentioned that openssh 7.9 is affected with few vulnerabilities and on upgrade to 8.1.13 will resolve it.
https://security.paloaltonetworks.com/PAN-SA-2020-0002
but below pan os open source listing mentioned as openss
...
Hi All,
As the title suggest, I'm not getting any local user-ip mappings from our Active Directory Domain Controllers.
if I do a "show user server-monitor state all" on the cli I can see the output below (I've removed the domain controller hostname a
...
guys,
i wanna achieve dns proxy wherein my requirement is as follows:
1. i wanna use my internet browsing PCs to use palo alto defined DNS which will use our ADSL 100mbps connection for browsing.
2. secondly, my other critical PCs will use DNS from exis
...
on:
I am not able to commit and it fails. Below is error message I get.
on:
anyone notice issues with HA pair synchronization with panos 10.1?
on:
Block domain while permitting some access.
on:
Threat Prevention Inline Cloud Analysis - Allow on Max Latency
on:
Interfaces in power-down state
