Like to know if there is an easy way to modify the names of multiple objects.
Hello,I've configured a VPN Tunnel from a PA220 to a PA200. They are able to ping each other but I don't see any ESP Packets in Wireshark. What should I do to get the packets to be encapsulated?Many thanks in advanced.
Simple question "How do we set a default gateway?"
Hi Community I'm looking for the possibility to be notified (trap/snmp/Panorama event) in the situation that a particular FW which is assigned to LogCollector for some reason stopped sending traffic to it. Let's assume that if there is a 1h gap I want to be notified.For some reason, I'm not considering implementing Syslog here. When such a situa...
How we can get expired schedule security Policy logs on mail alert....
Hi, I am new to the palo and have run into this problem that I can't figure out. We have a VPN between the Palo and a Meraki. It's usually on permantly but recently it has been having drop outs, sometimes for days. I have realised that if I disable the tunnel and re-enable it, it comes back on but only for a maximum of 1 minute and then I get th...
Howdy everyone, I have taught the foundations course...that was pre-covid. Now I am tasked with teaching routing. Which Palo-Alto class would the community recommend from your experiences that I teach? Thanks, JB
Hello, I have a FW that has many nat rules. And I found a bug, pan-130550:(PA-3200 Series, PA-5220, PA-5250, PA-5260, and PA-7000 Series firewalls) For traffic between virtual systems (inter-vsys traffic), the firewall cannot perform source NAT using dynamic IP (DIP) address translation.Workaround: Use source NAT with Dynamic IP and Port (DIPP)...
Hi All, Have you guys seen the below critical msg in the system log? Backtrace execution for the restarted process stopped due to an error accessing memory. Possible memory corruption? P.S: this is the passive firewall when the active FW went down. Many Thanks,
Dear Team, The description of the ms-kms application is as follows. DescriptionMicrosoft Key Management Service (KMS) activates computers on a local network, eliminating the need for individual computers to connect to Microsoft. To do this, KMS uses a client-server topology. KMS client computers can locate KMS host computers by using Domain Name...
running 10.0.2. superuser can create the tag, apply it. but the tag is not visible in security policy "tag" column. can open the security policy and "see" the tag. User is superuser, dynamic.
Latest spyware signatures appear to be blocking legitimate connections to ConnectWise control. The 5/2 AppThreat-8564-7375 update categorizes the connection/file (GetSessionDetails) as threat Generic PHP Webshell File Detection.Produces "unknown error" on the ConnectWise portal page.The only way I can get around it is to exclude the connectwise ...
Hi all, looking for advice following what is in my opinion very unusual behavior. Where I work for, we have a PA220 running Firmware version 9.0.3 that is used as the firewall for VoIP traffic for physical desk phones. We have two brands of IP based desk phones; Yealink and Wildix. Both types/brands connect to our cloud hosted Wildix PB...
All the DLP products I have researched require ICAP capability which the PA doesn't support. Does anyone know of a DLP product (network appliance or VM not client based) that will actually work with the decryption broker solution? Please don't suggest the Palo Alto DLP as it was not adequate in our testing.
Hi All, I have a client that has recently run into an issue, after upgrading to PAN OS 10.1.2. When they connect to Global Protect with their username and then try to RDP through the GP tunnel to a server on site using a different user account that is not in the allowed GP user AD group, the GP tunnel looks to freeze (doesn't disconnect) and all...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
