General Topics

Panorama Virtual disk addition for logging - legacy mode.

Hi Team,

We have panorama in legacy mode. We deployed it using 8.1 ova file by default it too 80GB storage and allocated 11GB for logging.

Now we want to add additional virtual disk in esxi server. When we add additional disk it by following below KB

...

Access problems via Globalprotect with AD group.

Hello everyone,

I am relatively new to Palo Alto solutions and I face a problem that has been going on for over a week. Could anyone help me?

This is the scenario:
- I have gateways 01 and 02 for the GlobalProtect.
- AD groups called Grupo1 and Grupo2.
-

...

Resolved! API Keys in PanOS 9.1

Hello All.

Do you know of a way to see all generated API keys on Panorama 9.1? Similar command exist on the wildfire appliance, but I could not find in Panorama.

Also, does anyone know how the API generation process works in 9.1? Are they keys persist

...

Resolved! How to parse and filter proofpoint list

Hello,

Since the default proofpoint miner is not working 'im trying to find a workaround to be able to download and filter the lists.

I have tried to use the generic json or csv miner but i'm having issues with both:

With the json miner I receive 0 val

...

Block domain .covid.

Hi Team

can we blocked domain in palo alto if domain name contains is *.*covid*.* in palo alto.

I was also wondering whether blocking such domain will be better through dns sinkhole or URL filtering.

Resolved! False positive (Generic.ml) detected for our application. Can you help me white list?

Hi Support,

We are getting a false positive on our application from the Cortex XDR.

Can you help me with how I can get the app white listed?

Application type is Win32 exe

VirusTotal: https://www.virustotal.com/gui/file/1f7b6a4d788f577e1f75a25a56c9eecd8

...

ISP Router connection best practice

Hi All,

Just looking for advise , pros vs cons about connecting an ISP internet feed directly to our core mpls/vpls switch.

ISP Internet Router—>adva—>Core Switch(siteA)—>mpls/vpls—>Core Switch(siteB)—> Palo Alto

The PA firewall will have a separate

...

Panorama HA Firewall PAN-OS Upgrade Clarification...

My apologies for the length of this post...I am trying to understand how to best upgrade PAN-OS through multiple major releases on a configured HA set and I may not be explaining myself effectively...here it goes.

I am preparing to upgrade a PA-220

...

Migrating Palo Alto's

Quick question regarding changing model of Palo Alto's. We're moving from a larger model to a smaller. Is there a guide I could use for this? From what I've gathered so far the two firewalls have to be on the same software version? is that the only p

...

Resolved! IP Pool Assignment

We have deployed a PA-VM into AWS running 10.0.4 and are currently trying to configure Global Protect to secure our developer connections to our AWS environment. We have a Global Protect Gateway deployed and are able to establish a VPN connection. Th

...

Resolved! Policy based routing

Hi,

Do we need a security policy, once the PBR configured in the firewall?

OR

FW just forward the packet to the Egress interface and not look for the security policy.

Thanks.

Resolved! The 7 byte custom signature minimum

Hello Palo Alto,

I am doing a custom combination signature for brute force/Layer 7 HTTP DDOS protection. I am using "http-req-params" to block more than 5 attempts in 10 seconds for a particullar site (

https://docs.paloaltonetworks.com/pan-os/u-v/cus

...

Resolved! PA-5220 App Update issues

In my environment, we must update our apps manually. One machine allows it to be updated like normal through the device menu, but on other machines when uploading the app file, it just keep showing the progress bar and doesn't go any further. Has any

...

Globalprotect users cert renewal process?

I have 20 GP users that has certificate check as first factor of authentication. The certs are set to expire in a month. If I renew the cert and export it to them on a USB stikc, will that break the connection until the certs are installed? What is t

...

URL Filtering reponse page into iframe

I have a situation, where on some page which is allowed in URL Filtering: ex. allowed_site.com I have an iframe with another site which is blocked on URL Filtering: block_site.com. I have configured response page for block action. But when I open all

...

Discussions

Panorama Virtual disk addition for logging - legacy mode.