Where do I start?

Hi

I'm a network engineer being tasked to take over our PA firewalls since the guy who normally handled them is leaving.

Where do I even begin to learn about this stuff? I've never had to work with these before.

Thanks

Palo Alto troubleshooting tool for IPsec

Hello

I established an Ipsec tunnel (policy based) between palo Alto and Cisco FW.

phase 1 & phase 2 are up and running but trying to transfer data, fail.

Capture packet (merge recieved and transmit) shown

Source : SYN

Dest : SYN ACK

And then Dest :  retr

How to check what zone a subnet belongs to?

Is there anyway to check what zone a subnet belongs in if there are multiple zones on the firewall?

Preferably through the GUI?

macOS Big Sur 11.6.2 - Global Protect 5.2.8-23 - Connected but Internet is not actually working

tcp ping from a firewall command line?

From the command line of a next generation firewall i can use 'ping host blah'.  Does the CLI have a command to ping a destination via TCP?  Or some other tool to do the same?

Blocking Torch browser

Hi All,

I would really appreciate if some one can help me on this.

I am planning to block Torch browser through a firewall rule, using App-ID. But as per information in the community we cannot entirely block the functionality of Torch browser using A

Log Forwarding

Hello everyone,

Before the question, the context.

I have a panorama wich managed a lot of devices groups. we have a lot of rules for them. Which all these rules uses the default profile for log forwarding.
I have a new syslog server and i need to forwa

Custom Vulnerability Signature to block older versions of Chrome

After reviewing this KB article: 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSOCA0

It looks like you can create custom vulnerability signatures for named browsers. 

Could you also do that to limit browser access via a

Match next line at cli

Is there a way to match the next "X" number of lines when piping to match at the cli?

I am entering:

show zone-protection zone outside | match udp

and would like to show the matched line and the next three.

This would be analogous to grep -A 3

Cheers!

Zone protection profiles disadvantage or drawback

Hi All

Can anyone tell me the Zone protection profiles disadvantage or drawback