Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
Hi,
I am new to MM & using community version of MM installed on VMware ESXi.
I am trying to retrieve a list of GitHub's IP addresses from the meta API endpoint (https://api.github.com/meta) & use it as EDL to be allowed in my firewall security policy
...
Hi,
I am about upgrade some PaloAlto firewalls with 10s of Vsys but wondering what would be a good report to generate to identify traffic flows for pre and post checks as well as identifying impact to services.
any help will be appreciated.
Regards,
Hi
I'm doing a global protection test.
And we created the External Gateway and the Internal Gateway.
And for the Internal Gateway, we didn't set up the Tunnel.
If so, wouldn't it count to the Globalprotect Max tunnel provided by the equipment?
In case of
...
Site 2 site allows only two networks to be pulled inside the tunnel (one of them behind the mikrotik and the other one behind the palo alto).I’ve tried different settings and it doesn't help.
Has anyone had experience building a tunnel between them ba
Hi,
Panorama can reach out internet but when checking the updates we are getting a message says "Error while trying to read upgrade info. Please try again later". I did follow https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g00000
...
We block Regions at the moment, so traffic going to Russian IPs are dropped. But lets say that I now need to allow a specific URL to be allowed to Russia. If I make a rule above our block rule that has a custom URL category associated with it and def
...
Having a bit of an issue but can't seem to pinpoint the solution.. When I go to add a security policy rule, under user, i cannot find specific users. However, when I go to the traffic monitor tab, I can see the user mapping is working from the Us
...
Hello All,
I want to create support account to license my palo alto vm.
But while registering it is asking for Device Serial no or Auth Code and Sales Order no or Customer ID, wheareas i dont have any of these. My PA VM does not show serial no. Snap
...
I'm running PANOS 10.0.2
SSL inbound inspection for a web server is working but for a seperate SMTP server it is not.
Both use the same certificate.
Both use the same cipher suites.
Two seperate decryption rules wihich are clones of each other, only the
...
HI Team,
Is it possible to redirect the traffic from HTTPS to HTTP.
As my webserver is using HTTP. We outside user connect it's https://abc.com it's should be redirect to http://abc.com.
Please advice
Hello Community,
we were trying to connect Panorama 8.1.4 with SAML and as an IDP Microsoft ADFS on Microsoft Server 2012 R2.
We tried a lot of configuration and followed the admin-guide, but were unable to get a working authentication.
The auhtd.log
Hi,
We would like to know if its possible to configure Palo Alto GP gateway in order to permit connect using Cisco anyconnect client?
what it would be the config to do that?
Hi Guys,
To create the service account in AD, which is utilized on the device. we know that below rights are needed.
- Distributed COM Users
- Event Log Readers
- Server Operators
My query is why it necessary, what it's justification to be a part of th
...
Hi Team
Unable to see pre-defined EDL IP list in security rule destination zone on panorama. but In firewall I can able to see the predefined EDL in security rule destination address. antivirus, content version all are same and installed on both devi
...
TomYoung
on:
how can i create a PBF rule to send traffic to a http/https proxy?
TomYoung
on:
Confused about QoS on Palo, need some assistance.
TomYoung
on:
Static Port Address Translation question
TomYoung
on:
what is the cli command for checking last failover
reaper
on:
SSL inbound inspection certificate issue
TomYoung
on:
One Global Protect Portal and Two Global Protect Gateways in One Firewall
