Hello -What is the command to edit the virtual system of a Aggregate subinterface via CLI?
Hello, The issues we are experiencing are with SSL decrypt. When this setting is enabled we are experiencing significantly degraded internet performance.We understand that this would have an overhead but the current overhead makes it almost unusable. The symptoms are worse on pages such as youtube.com due to the ads.We have tested with SSL decry...
When I tried to download the PA version 10.1.1 on my appliance, it sent me an error,OperationDownloadStatusCompletedresultFailedDetailsFailed to download file
Yesterday at 8:37am and today my noticed the dateplane hit 100% for about 15 seconds(an eternity in network time) and dropped back to normal. Today I ran show running resource-monitoring that basically just show me it hit 100% yesterday and today but not why. I checked the session count 36813/524286I checked the monitoring the only thing that st...
We began testing of the iOS 13 beta last week on several test devices that are connected to our internal mobile device network. This network passes traffic through the Palo with SSL decryption. We are finding that iOS 13, even with our cert installed on the device via MDM, does NOT accept the decrypt cert. We are still testing, but so far we ...
Hello colleagues, did someone manage to use dynamic tag registration on the remote user-id agent? I cannot find any explanation in documentation or community discussions. It is written in the manual that need to create a http profilehttps://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/forward-logs-to-an-https-destination.htmlSo, ...
The Palo Alto device is saying that a workstation on the network is querying the DNS server for some malicious URLs for some of the dates and some of the time.Full scan using McAfee VSE, Microsoft Safety Scanner, Malwarebytes, Spybot, said no malware detected.Using McAfee Getsusp I upload 40 suspicious and unknown files, analysed in McAfee lab –...
Hello, I recently noticed that URL Filtering licenses have been replaced by Advanced URL Filtering licenses.The version of the box is PAN-OS 8.1.My question is: Is it possible to use these new licenses with version 8.1, or do I need to upgrade to PAN-OS 9.x? If so, how do I activate these licenses? Thanks in advance.
Hi Team, The Google and Google related products/pages are completely restricted at our environment.We only allow a specific destinations from our internal Application servers.To remediate the vulnerability risks, we are in need of updating the google-chrome periodically. Could we get an inputs in allowing the google-chrome updates alone, and blo...
Hi Team ..We have enable ssl decryption then we could not able to download big file. Downloading starts and after some time it automatically in reach to pause state.We disable SSL decryption then we could able to download file. Firewall side we did not receive any drop packet but global counter we have received the below the counter. admin@PA-E...
I am wondering if there is a way to clear password history. Due to audit requirements we need to have "Minimum Password Complexity" requirements including changing on first login and preventing Password Reuse. I am having issues keeping an account synched through templates and the password the same across all fws. If there is a way to clear the ...
I will configure 14 VLANs in total. I will connect all Firewall Interface to one of the L2 Switch and I will cascade the other L2 Switches with that L2 Switch. In this case, do we need Trunk? Please check if any problem with such configuration.There will be no L3 switch and the Firewall will do all the routing.
I would like to make sure my understanding of the upgrade path is correct before I do the upgrade. * Current installed PAN-OS version 9.1.10 - Standalone no Panorama* Below is a screenshot from the upgrade guide ( https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/pan-os/10-1/pan-os-upgrade/pan-os-upgrade.pdf) * Based on the upgra...
I am Labbing up a configuration I am about to go live with in production but it is not acting as it should when trying to apply a NAT rule to a tunnel interface. When I apply individual rules to the vpn traffic as I would like it to act I am not getting the intended result. I have to select bi-direction to get the NAT rule to act as it should. I...
Hello, In our Citrix Virtual Apps and Desktops environment (On-prem 2106) we are only able to monitor user info from the XenApp servers where users launch a published application. Is it possible to monitor user info from non-persistent Windows 10 virtual desktops? Each desktop has its own IP address. Thanks!
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
TomYoung
on:
FWs no longer forwarding logs to Panorama
