Hi,If palo alto subscription expired , does it limit the bandwidth of the interfaces ? Thanks
I have to create a url category which is would allow anything coming from url x.y.z.com/api-* every time i try to create that custom url category i get the following error "Consecutive asterisks (*) in a URL wildcard pattern can severely impact performance and is not supported. Instead, use a single asterisk or multiple carets (^) to indicate co...
Hello, Despite my research on the site, I am looking for the following features on the PA-3400 series:- Max Virtual Routers- Max. Security Zones- Max. Security Rule- Max. Address Objects- Max. Address Groups...Thank you for your help
When configuring a site to site IPSEC tunnel, i see that the IKE gateway can be set to allow packet fragmentation or not (DF bit) when using IKEv1. However the option isn't present for IKEv2. Other vendors, such as Cisco, allow the DF bit to be set for IKEv2.Why is this the case with Palo Alto (v9.1.x)?
Hi all, I am checking the log of firewall to know the states of firewall issue.I found that there are some log in ms.log as show below2022-XX-XX XX:XX:XX.XXX +0800 update system boot: count = YYYY, timestamp = 2022/XX/XX XX:XX:XX What is the meaning of this log? Is it mean the dataplane reboot at 2022/XX/XX XX:XX:XX, total reboot number is YYYY?...
I have noticed my primary Palo Alto 820 HA heartbeat gets disconnected every day at 9 a.m. This causes a 5-minute network outage every morning. suggest what could be the cause.
Good day, Our PA-500 is currently on PANOS 7.0.5-h2. We want to configure GlobalProtect - Multiple Gateways using the same IP Address. Is this possible? We tried to follow the instructions here: http://dsg0.com/t/palo-alto-networks-globalprotect-with-multiple-gateways-on-one-ip-address/122 but we are getting an error that the GlobalProt...
Hi All.Yesterday we tried to put PAN Device on a POC with a customer just before traffic reach their Proxy solution. Customer redirect using WCCP web traffic from router to Proxy and we used a PAN port on Palo Alto to receive that WCCP traffic. The Proxy device only has one NIC interface, so at TAP port of PAN we should see WCCP traffic redirect...
Dear Team, I can check the log storage and number of NICs on the compare site and spec sheet provided by paloalto. However, I cannot check the CPU core and main memory for each model. If I have a device, I can access the firewall and check it, but if I don't have it, it cannot be checked. I am looking for a model with CPU 4 Core or higher and ma...
Hi All,I got Vulnerability HTTP OPTIONS Method Enabled on Panorama, the status show OK.curl -k -v -X OPTIONS -x "" https://10.10.10.10/restapi * Mark bundle as not supporting multiuse< HTTP/1.1 200 OK< Date: Wed, 27 Apr 2022 02:47:02 GMT< Content-Type: httpd/unix-directory< Content-Length: 0< Connection: keep-alive< Allow: OPTI...
Hi to all, before to write i red some post here on the community and i just configured my NGFW and windows domain controllers.Becuase i have every 3 sec an alert about "The server-side authentication level policy does not allow the user AAA\BBB SID (XXX) from address Y.Y.Y.Y activate DCOM server. Please raise the activation authentication level ...
Hey guys, I'm looking at moving off Sonicwall NSA 3600 and onto a PAN appliance. One factor is that I'm currently using Sonicwall's VPN functionality which has some simple, built-in MFA in the form of TOPT codes that the user must put in each time they connect to the VPN. Its not dependent on any other service so its kind of nice that way. I was...
Hi,Currently cannot upgrade a new pa820 (10.1.4), its auto-commit is set to run tomorrow and blocking any updates or current config commits. Does not stop when using 'stop job' from GUI or clear job CLI. Enqueued Dequeued ID PositionInQ Type Status Result Completed----------------------------------------------------------------------------------...
Hello,In PANOS SD-WAN (not PRISMA), you must either use predefined zones (zone-to-branch, zone-to-hub, etc.), or you can map pre-existing zones to the predefined zones in Panorama. Before SD-WAN, using IPSEC tunnels, we could give each tunnel/branch its own zone and control access very easily. Since SD-WAN requires use of predefined zones, it s...
I would like to receive email alerts on certain system events, such as when there is a successful login and unsuccessful login attempt from GUI and CLI. (Among other events). The filter for the stem log is looking for certain "strings" or "attributes" Andi have no idea where to find them. Any ideas? Thanks.
reaper
on:
Server monitering -Connection refused
PavelK
on:
Commit Failed
MP18
on:
SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
| Subject | Likes |
|---|---|
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like | |
| 1 Like |
