Hello Friends I am trying to take packet captures on my firewall. But in captures I do not see all the packets. What may be the issue? Am I missing anything?
Hello guys, I have a problem that i've been the whole day trying to make it work but i can't and i have to solve it asap.I have around 12 vpn connections peer to peer working. I have to change those vpn connections to another IP Public little by little (my peer IP).I tried today with 3 vpn sites modifying: - IKE Gateway: modifying Interface, loc...
Hi Is it possible to setup and practice Panorama without license at lab for practice? thanks
I am spinning up a new DMZ and wonder if there was a some means of restricting traffic between hosts on the DMZ using the PAN. I have a Cisco Nexus switch and the hosts are VMs in Cisco UCS. Thank you.
Does anyone know if PanOS v10+ can identify when a UserAgent is being spoofed? I've been looking through the discussion boards and online user documentation and haven't been able to find any results. I'm trying to see if we can catch when a device tries to circumvent restriction policies by claiming to be a different device.
As stated in Where Can I Install the GlobalProtect App? (paloaltonetworks.com) the official client for W11 is > 5.2.10Personally, I've used version ~5.2.7 without issues, the only thing I noticed was that detected host for HIP Profile was Microsoft Windows 10 Pro. Now that I've updated to version 5.2.10-6, detected host is Microsoft Windows 1...
We have been using the User-ID Agent and it has been working for over a year. On the 17th, the PAN stopped populating the traffic log with the user-id information. The Agent is working fine (user ids show up in the monitor) and the PAN is connecting the Agent, but no user information is showing up. I have checked through the config logs, and not...
I added an existing firewall Active/Active Cluster with multiple Vsys into Panorama Before the integration, some Device objects like "certificates" or "Local user database" were shared by the firewalls member of the cluster. Now I need to create the objects twice times in each template of the firewalls. Is it possible to manage it like before a...
Beginning sometime last week (possibly on 12/26) our Windows-based User-ID agent stopped being able to query our DCs for user-to-IP mappings. The PA shows 1000s of request for IP mappings msgs with little to no response msgs from the agent. The agent server debug log shows a long queue of pending lookups with occasional WMI/Netbios access errors...
I have a PA-220 at home and want to use it to obviously protect my home, but also to help prevent my children from accessing things I feel inappropriate. Obviously with encrypted traffic from things like gaming consoles and phones this is harder to do and decryption is required. My question is, what is the best way to implement decryption on t...
Hi,Recently we upgraded our VM-100 fw from v9 to v10 and apart from the yellow login wallpaper there was not much visual changes after the transition. Everything is running as smoothly as before, except an issue with SNMP traffic statistics. We extract interface traffic statistics from our VM-100 via SNMP to a Cacti OVA appliance so we easily c...
Hi Folks, We are recently receiving multiple cases where the devices behind the PA firewall is not able to access certain websites. In an recent case we had seen for two devices (Device A and Device B in different VLAN's ) located behind Palo Alto firewall from device A we are able to access the website but from device B we are not able to acces...
Hi U-turn nat is configured for trust user to ping server located at DMZ. After the user ping the server from trust zone to dmz zone, the security policy count increases, but nat policy count does not increase. Is this normal? if not, why it happen? thank you
Hello,I have a PA-220 firewall. There is a normal switch connected on ethernet 1/4. The switch is connected to the equipments of 2 network segments, 10.1.240. * and 192.168.5. * . These equipments need to communication now. But I can't change their IP. Can I do this through the port settings of the firewall?My idea is to add a new sub port to et...
Hi Comunity, Does paloalto has a waf (Web app firewall) solution? Many thanks.
Raido_Rattameis
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
