Global Protect Client is setup so that users can disable VPN however they need to input a reason why they disabled the portal. I wanted to know where those disable reasons are stored. Thanks
Hello all!I'd like to compile a list of all my NAT tables for static-ip entries for all my firewalls, I don't know if there's a better way to do it but I'm trying to do it by running the following command on my firewalls and recording the output:show running nat-policy | match index\|source\|translate-toThe issue with this one is that it's showi...
Hello -Just looking to see what others monitor for on their Pano/Palo FW within Solarwinds. Is there like a general consensus (best practices) or is it all over the place depending on requirements.
We are currently testing out/learning with a new 3250 in no rules / allow all traffic mode flowing from ISP > Palo > Cisco ASA (Being Retired). We have two public ips routed to two local static IPs and those have stopped working. Would a policy need to be created so the Palo does the routing and not the Cisco.
hello All, Today I've spotted weird behavior: We have 2 static bidirectional NAT translations between UNTRUST and DMZ interfaces for public IPs. Also we are allowing certain applications in for those public NATed IPs from any IP addresses using only applications and not service/ports. From logs we see that traffic which is properly allowed and w...
Dear experts I set a PA firewall as an ASBR, connects to a RIP and a OSPF area with eth1/1 and eth1/2 respectively. And created 2 loopback interfaces on PA, advertised them into RIP and OSPF respectively. Then I can reach them within RIP and OSPF area separately. Now I create redistribution profiles RIP-2-OSPF and OSPF-2-RIP, and apply them to O...
Hello we have PAN that license uploaded manually before, because a network issue that we cant get the dynamic update/retrive the license.we think that the license problem, so we want to remove the license and then add again to the firewall. but we choose the deactivate, not the Delete command from CLI. after that, we want to upload manually, but...
Hi Team, We've configured to schedule reports for email delivery on daily basis, It was working fine without any issues but last week we had restarted the Palo Alto firewall, Since from that day we're not getting custom report email. When we check "send test email" on Email Sheduler its working fine. Verified all the configuration which is fine ...
Hello, I’ve recently ran into an issue where I’m using IKEv2 preferred and the two firewalls are using different versions of PAN-OS. It will fail with “invalid sig.”. If both firewalls are the same PAN-OS version (this has been happening on 9.1.11-9.1-13h3… I don’t have any other versions to test), it works fine. But since I can’t update all fi...
Hi,I have been checking my PA-2050 with PAN 4.0.3 and I realised about new command in sesion configuration. The exact command is:set deviceconfig setting session resource-limit-behavior with the options bypass and drop. Default option is drop.I had problems in my infrastructure reaching the limit sessions. Synthax seems clear but before install...
I have the firewall 3220 model in the 9.1.11 version in HA mode.I can see all the aggregate interface in passive firewall is showing down. i want to know is this expected behaviour or not because I checked the below KB for some mode it is expected behaviour. Aggregate Interface Down on Passive Device - Knowledge Base - Palo Alto Networks moreove...
HelloAs PAN-OS CLI is locked, I don't have the ability to run a script and increase the CPU of my VM-series instances in Azure VMS.I'd like to test and demonstrate the scaling (IN/OUT) feature regarding CPU level (high/low). Did someone knows a way/solution for that (appart of reducing Azure VMSS scaling levels)? Regards.
Hi all,I need to make work a voip server behind my pa-3020. The server is using stun protocol and requires that nat is not symmetric.I've tested a public stun server (for example stun.telbo.com on port 3478) using pystun3 (a python tool to retrieve nat type).That's what I got (A.B.C.D is my public ip) ~# pystun3 -H stun.telbo.com -dDEBUG:pystun...
Hello,After a factory reset of the Palo Alto PA-3220 (Firmware 10.1.1), then a reboot, I cannot access any of the PANOS partitions (maint-sysroot0, maint-sysroot1, etc.).And this message appears when I select one of the partitions in the menu (grub):error: file '/boot/vmlinuz' not found.Press any key to continue... Can you help me,Sincerely,
Hello, after implementing SSL decryption we're trying to improve visibility and noticed that files to dropbox web aren't shown correctly When downloading from the dropbox website, the file names are correctly shown, but when uploading the files are registered in the data filtering logs as "presentation.xml" and "put_block_returning_token" Tried ...
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
| Subject | Likes |
|---|---|
| 3 Likes | |
| 3 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 2 | |
| 2 | |
| 2 |
