Hi with respect to upgrading Palo Alto to new base/versions which filesystem folders shown below are most important so that you don't encounter disk space issues ? Thanks in advance.
Hi Team, I know PA 440 support up to 1000 user & its the Max tunnel user limit, but we were unable to connect more than 250 users and got this error as "maximum user limit reached" then found that the tunnel limit is [0-250] in Global protect Gateway tunnel settings. I'm using PA 440 (PAN-OS 10.1.4), kindly let me know in which PAN-OS versio...
Have confirmed that no changes have been made firewall-wise, nor GP agent. The client gets authenticated, assigned an IP from the pool, but is then unable to ping anything internally, and consequently can't resolved DNS. The PA hosting Global Protect is a VM in Azure, as are the onward servers.
We have one user who unable to connect to Global protect VPN after windows update, - We have tried installing different versions of Global protect -Issue is not with ISP as another person using the same network is able to connect on different machine - With this user machine, even my test id does not work, so not an issue with authentication On ...
Hello All,I have configured to block streaming-media and online-storage-and-backup category by URL filtering profile. Issue:- Users will connect to the Psiphon application and can access the blocking website.I tried the below option:-- Apply SSL forward proxy decryption with decryption profile to check block session with unsupported cipher suite...
Admins authenticating to Panorama are using AD credentials. The same admin accounts are created on each managed firewall as Superusers. The issue we are having is with Admins committing changes as local overrides (unknowingly/accidentally). I am trying to prevent the admins from being able to commit a local override. I created a user as Super-Ad...
Hello everyoneI want to block apps on iphone XYou guys help me. Thank you!
Url is not working. Case id : 02150586
How to verify that tcp rst or slowness is due to PA Firewall? How to solve it?
My understanding is the intrazone default policy allowed anything in a layer 3 vlan to talk to anything in that same vlan on any protocol. So if I have layer 3 vlan of 10.31.25.0/24 and host a is 10.31.25.148 and host b is 10.31.25.210. In theory everything is allowed between the two of them. Does that include Multicast? Note Multicast is NOT en...
User reported that access not working, traffic is hitting to correct rule , action is allow but application is showing incomplete and session end reason is aged-out . sent packet is 1 and received 0Can anyone tell me what will be the resolution for this ?
What is the behaviour if schedule is expired on security policy? Existing established session terminated and new session will not established? What is the solution if existing established session not terminated after expired security policy
Dear Team, Please clarify the below points! 1. We are required to start the GP at boot time when the windows start ? 2. How to GP login and remember old password [windows machine Active Directory client.] ? RegardsKarthikeyan Balamurugan
Hello, I bought a PA220 and have got the Mgt cable into my home broadband and have connected and got it registered. The IP address i gave the Palo is on the same 192.168.0.0 network as my home broadband scope. How do i get the traffic going through this firewall thanksKevin
I bought a M-100 from ebay but I can not register it on my account as it is already registered. What should I do.
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
