Hello.Does anyone know about the above error?It is the latest version, but the error continues to occur.
Hello all Model: PA-3220 Firmware version: 10.1.16 I am not able to open some custom-created Anti-Spyware profiles after moving to 10.1.15-h2 from 10.0.X then upgraded to 10.1.16 (being a preferred version ). showing the below error. - default & Strict are there by predefined and are opening perfecty without any issue. Created a test po...
Hello, I am trying to locate a UKCA DoC for the PA 800 series. I can fimd a high level CA with EMC details in Chinese that references the Low Voltage Directive, but require a specific UK CA variant. Any assistance approeciated BRSteve
Hi, We have a VM-series running 10.1, with a number of hosts with public IP addresses. The hosts are running a common service (i.e. HTTPS on 443), however they need to be accessible from external on an alternate port (i.e. HTTPS 8443). As such, we need to translate the port but not the address. Similar to our existing firewall (Checkpoint) I wou...
Hi.This is a list of licenses currently set on paloalto. However, the above error is occurring.I manually raised the license and reset the policy, but the same symptoms appear.I'm using a free license version, is it related to this?
Hi All,How to configure dual ISP with both ISP is active at the same time.Local user can user both Isp when they using Internet.How possible ?PA-200 PAN OS 8.1.8Thanks. Pls Advise.
Is Palo Alto's OSPF Graceful Restart checkbox on the virtual router roughly equivalent to Cisco's NSF IETF method? If I do this on a Palo Alto: And this on a Cisco... Q:Should it work? enableconfigure terminalrouter ospf process-id [vrf vpn-name ]nsf ietf [restart-interval seconds ]endshow ip ospf [process-id ] https://www.cisco.com/c/en/us/td...
IP lists for edls have:https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/formatting-guidelines-for-an-external-dynamic-list/ip-address-list#idd44a975a-a94a-4398-864e-5cf223f1d351Is there a way to add a comment to why a specific URL was added into an already existing custom URL category? Li...
Just wanting to make sure I am doing this properly so it works how its accurately. I am trying to whitelist 2 different IP's and a single url https address. I am trying to do this for a specific group of users on the firewall are able to access it and not a huge group.
Greetings!As title suggests, I'm trying to implement PBF to the specific destination network in Internet through a server residing in DMZ. There are three zones configured: Inside 10.0.5.0/24 - from where traffic is initiated DMZ 10.0.22.0/24 - where intercepting server is connected. Plain Linux with net.ipv4.ip_forward = 1Outside 2.2.2.2/30 - f...
Hi All, I have an interesting issue of most of my firewalls not sending logs to the log collector. Have only a 20% success ratio with successful log collection thus far. I see the below in the below: Log Collector : 000710004755Conn ID : lr-10.95.87.8-2Connection IP : 10.95.87.8Conn Source IP : lr - ...
Dear all, In firewall version 8.1, Can we input address range directly to security policy source and destination? or we need to create network range object to apply in address only?Thank you for your answer.
Hi all, I deployed the GP agent and user was authenticated by client certificate, most users wroks, but some users cannot pass the authentication and get the following error messages in PanGPA.log: (T1356) 06/08/18 13:39:53:722 Info (2559): PanWinhttpCallback(dwInternetStatus=WINHTTP_CALLBACK_STATUS_REQUEST_ERROR, this=0000029E2C99C820)(T1356) 0...
Dear Team, When my client clicks on the WildFire analysis reprot, they see the rabbit image as shown below. Has anyone had the same experience as me? I would like to know the cause of the symptom and how to solve it. Thanks in advance,Kyungjun,
Hi Folks I have the next topology. The problem is the return traffic when I connect via GlobalProtect and I get a client IP 10.81.235.x. This IP cannot connect with a web server that is in the LAN, but this LAN is external through a data link routing.In the other side, owner of web server 192.168.36.38 they don't want to include subnet GP 10.81....
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
