Hello, I have a set of firewalls and I have the threat license expired. All I am trying to do is change syslog server but it will not commit and I get this message. Anybody know why? Thanks.
Hi all,I have a collaborator that is trying to change his password, but when he clicks on "forgot password" link, the portal says the mail is delivered, but he doesn't receive any mail from the "[email protected]".When i do a message trace in 365 Exchange, there's no mail from Palo Alto to the mail desired.I'm sure the mail address is...
Looking to see if there is a troubleshooting guide for NATS and for Security Policy rules. Searching has turned up various hits here and there, but not something comprehensive as what cisco has on their site for their docs. Am I just looking in the wrong place? Any other PA sites that have good info besides these boards?
When I tried to log in to the support portal, getting the below error, earlier I used to login into the portal.UnAuthorized AccessYour membership has expired or has not been approved, please contact Palo Alto Networks Support. my name : Arumugasamyemail : [email protected] 39063271
Hi All, I will be changing one pair of our firewalls from an active/passive pair to an active/active pair. Whilst confident of what is needed and the process I need to take, has anyone ever gone through this process? Was it problematic, time consuming, any gotchas I should know about? Regards Adrian
Hello, i have palo alto with 2 ISP(A and B) and 1 internal connectioni enabled the ECMP + simetric return and ecmp setting IP Modulo.my goal is, force 1 IP segment to ISP B to go to the internet i already setting in PBF, using enforce return simetric but in the the traffic monitor, the user show incomplete application. i assume that it go into I...
Hi all,I'm trying to connect to vpn using vpnc.Everything works fine, but if I restrict the region in the gateway, vpnc does not connect because it is shown as "Client region: (null)"Any experience on this?Thanks
Hi all. We have PA-820 with 10.1.2 with User-ID Agent on Windows AD runing version 10.0.4-r23 and we are using Cisco switches for users. We have 802.1x enabled on ports for users. The problem we have is, that PA doesn't recognise users from 802.1x, instead sometimes they are recognised as machines (under Monitor->User-ID), and then it won't a...
Hi Everyone, I have an issue that I haven't been able to resolve. I have a small domain setup with a Windows Server Update Service that is located in a DMZ. The machinges that are in the inside network (trusted), are setup to pull their Windows updates from the server in the DMZ. I have setup Group Policy to make this happend, and it works fi...
Hi all...I have a Palo Alto Active/Active pair and the HA3 link between them is down. Will PANOS then power-down all other physical interfaces when the HA3 link is down. Just looking for confirmation that this is expected behaviour or whether I have something more serious happening to this 3260. Any advise would be greatly appreciated name id sp...
Is it possible for Palo Alto Firewall to decrypt third party VPN agent traffic such as NordVPN, NordLynx like decrypt HTTPS web-browsing traffic? If it cannot decrypt these traffic, anyone know the App-ID for NordVPN, NordLynx?I found some VPN app-ID like ciscovpn, open-vpn but no Nord related. What App-ID should I use to block NordVPN, NordLynx?
We are trying to use DNS wildcards and Custom URL categories to restrict access to certain machines in a security policy. We cannot get it to work and I cannot find any docs that a URL filtering license is required to use Custom URL categories. I have opened a ticket and have to been working with level 1 they haven't provided docs to support my ...
hi everybody, we've installed cortex xdr agent on a terminal-master server which gets cloned for distribution xdr-agent on master has active connection to cortex-cloud but cloned servers can't connect... xdr-log: 2022/05/18T14:32:44.590+02:00 <Info> LVTS41 [3608:5152 ] {trapsd:VerdictService:WfDeferredRequestsTimer:} Calling cloud for 3 W...
Hello everybody. I allow a url. I also allowed categories for that url, but the site still doesn't work properly. There is a problem connecting to a server on that site and it is deny Thanks in advance
Hi,we try the export of the config of Panorama and our bothe Firewalls 3260 thru the "Scheduled Config Export".It runs well with FTP and SCP port 22. With a custom port ssh, the "Test SCP server connection" failed. I found no future infos on https://panorama01.cid.dom/PAN_help/en/wwhelp/wwhimpl/js/html/wwhelp.htm#href=panorama-scheduled-config-e...
