Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
Just wondering what is best practice for this?
We have a /29 on our outside interface. We are using the IP assigned for client NAT translation.
Over the coming months we’ll be configuring several VPNs to the same cloud provider.
Should these terminate
...
I have a consultant who is asking if the Global Protect VPN would connect with an OpenVPN-based client? I suspect he is working from a Linux PC.
does Palo support it?
We have a Security Policy Rule with Application rabbitmq, and Service is application-default. In the same Security Policy Rule, we allowed the dependant applications amqp and SSL. When we test traffic, in the Traffic log, we see it matching the zones
...
Hi Guys,
Our company has recently made several acquisitions. All of them have non-palo alto firewalls. We will be migrating each of non-palo firewalls to our palos.
Now, for migrating the rules, we are using expedition.
But, some of them have overlapp
...
Does MM have the ability to remove HTTP:// and/or HTTPS:// from a list of URL's before creating the output file for EDL?
How is the community doing? Do you have any questions for the LIVEcommunity team or feedback related to LIVEcommunity?
This is the place to let us know. Please feel free to open a new discussion about what you LIKE about the LIVEcommunity, or what yo
...
I have PAN running version 8.1.17 and it is configured with two DNS servers on the management interface, you know the usual, nothing special. I have security and NAT rule on the PAN firewall the uses FQDN.
Is there a way to detect when the PAN fail
...
Hi Community,
We wish to add a batch of users to the local database, I'm just wondering if anyone has had experience with scripting this or doing this in batch.
With the command "set shared local-user-database user testuser" it requires separate user
...
Hi everyone,
We have our PA Firewalls in different countries all around the globe.
Lets call them Country1, Country2. Country3 and so on.
All locations are connected to each other via S2S VPN.
We have Panorama in location Country1. And it manages firewa
...
Hi All,
I use PA-220's in HA pairs often, and I've always used a straight-through cable to connect port 7 and 8 from FW1 to port 7 and 8 on FW2. I've never had ANY issues with this configuration.
I just learned that PAN says to use a crossover cable
...
has anyone noticed that globalprotect portal allows a user to download the software without authentication? I'm running 5.0.4. Here's the exact link:
https://{IP/FQDN}/global-protect/getsoftwarepage.esp .
I am trying to access http://www.brokercheck.com from behind the PAN firewall via dynamic NAT without any success. I have other customers behind different PAN firewalls, regardless of PAN OS version, with the same issue access website http://www.bro
...
Hi Guys,
Just want to seek your inputs about what can be the best integration approach for this scenario.
Currently, the VLAN gateway is in my core switch and I will be introducing PA FW into my network. I want to have control and visibility for my int
...
I recently migrated a few HA pairs into Panorama in my environment. Historically, our security policies were configured to only send traffic logs from deny rules to our syslog. Any allows were only logged on the local firewall (due to costs of Splunk
...
Greetings all,
I'm wondering if anyone else is using Cisco ISE for network access control and has experience integrating it to publish User ID to the Palo Alto firewalls?
I saw a support article for it but the regex appears to be out of date. I foun
...
PavelK
on:
Clarification which update to use for CVE-2023-38802 (VM-100)
OtakarKlier
on:
How to configure ipsec vpn
