I have installed LetsEncrypt's Root, Intermediate and Certificate with Private Key on firewall. For some reason all options are grayout. I used Certbot to generate certificate. How I can resolve this?
The students in our school district have discovered that Invidious sites (https://invidious.io ) are able to circumvent the Youtube content blocking we had in place with our Google Chromebooks. Has anybody else experienced this yet and/or discovered a solution for 'blocking' Invidious?Thanks,
Need to upload palo alto PA-2020 of version. it have version 6how i can do it and what version i can upload
We are progressing to moving show services to the cloud and I'm been told that port 25 is not opened or being blocked in Palo Alto. So where do I check to find out if this is being allowed or being blocked?Sorry this is a really basic question but I've been asked to resolve this because the regular guy has left the company..
I am trying to find out what the typical port to port latency is of the 800 and 3200 devices. I appreciate that this probably changes depending on what inspections are running, and configuration, but I am after a ball park figure for standard L2/L3 interfaces with a simple rule set, and how much extra IPSec adds.
I'm working using a mobile hotspot (T-Mobile 5G), but I have chronic failures until it finally falls back to SSL. Then I run fine for many hours until I need to reconnect. Question: Can I force it connect in SSL? I'd be happy to help improve the product by diagnosing the issues, if anybody wants to reach out to me. My IT department j...
Hi, One of our runs vulnerability Assessment on LAN Interface of the PA NGFW, And they are getting SSL/TLS Client-Initiated Renegotiation vulnerability, Please help me to remediate the same.
I would like to create and export a security report giving me a simple count on the number of times an attack was attempted.The definition of an "attack" could range anywhere from a network discovery to a tentative of password brute-force, as many vectors as possible.I am using a PA-3020 on version 9.1.9 but the report won't be limited to this v...
I have to use Global Protect on my home Windows machine purely for accessing certain work-related websites that aren't accessible without it. Ideally I'd like the rest of my browsing (e.g. Youtube) to not have to go through it. My idea for achieving this is to use Chrome (unproxied) for all my non-work browsing and Firefox for accessing work sit...
Helo, we have started a plan for a new project. I have created a picture, so you can see, what I acutally mean :). User will via some customer portal setup a new broadband link. He will be able to choose if the broadband should be secured and by several levels - TP, URL, DNS, WF,...If he choose the security level and confirm it, the customer por...
Hi, I configured GP pre-logon method, But it’s only working in administrator mode even though the user is part of administrator group, it’ not working for normal users. I followed below KB article,https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEYCA0 In global protect client installed laptops, we are able to connect g...
I have a greenfield Palo with a fresh ISP.Have confirmed from the Palo I can source from my interface and ping outbound to anywhere in the world.Interface mgmt has been set to allow ICMP, I've left the allowed IP's blank and also set my specific IP, neither allow ICMP traffic to the interface. The more frustrating thing is that nothing is hittin...
Hello,I have a vpn ipsec in production, now I have to add a secondary remote peer.It's my first time I have to configure a 2nd peer.If I understood well I can't simply add a seocndary peer to the VPN but I have to configure a new psec but the difference is the static route related the remote network.Example I should have:Remote net: 10.1.0.0/24R...
It seems odd that the base bundle (PAN-PA-5450-AC-SYS) includes a NC and not a DPC. Can someone from Palo, or someone that has received a 5450, confirm that a DPC is *not* included and the base bundle (it will not function on its own)?
Below find the certificate KeyUsage What is wrong with my certificate?
PavelK
on:
How to build SCM Managed NGFW with no management internet access
reaper
on:
Server monitering -Connection refused
OtakarKlier
on:
Commit Failed
OtakarKlier
on:
SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3
