Hi, ospf is configured at the PA. please see the below screenshot. but after commit, it shows the below error message. Based on the picture, PA is using ospf2, why it shows the erro message? Thank you
Sometimes our Globalprotect client application stops working on windows 10 OS.It seem to start after an uninstall\reinstall happend.After the reinstall, GP works, but then when the user reboot or logoff\login to windows, and start GP,GP removes the PanGPS service and stops working. If I do a quick repair, it works again until the next reboot. I ...
Hello, I just upgraded to PAN-OS 9.0.0 succesfully, but I cannot find the URL Override setting? Does anyone know where is it located? Thanks.
Hi Team,Palo Alto port mirroring will forward only a copy of encrypted traffic "https" after decrypting itor also can forward un-encrypted traffic "http" as well
Our company was recently sold off and their IT department erased our firewalls leaving them reset back the to manufacturer’s configuration. I’ve built it back as much as possible, but I’m missing something. I’ve worked with other firewall devices, but PA is proving challenging. How do I configure it to connect to serverlist.paloaltonetworks.com,...
Hi I'm a network engineer being tasked to take over our PA firewalls since the guy who normally handled them is leaving. Where do I even begin to learn about this stuff? I've never had to work with these before. Thanks
Hello,I've been looking a history entries in our threat log and it seems to me that most of the default settings for vulnerabilities - "action" are set to low, for example to "alert" - although they classify the threat as "medium" or "high". For example in the screenshot below the threat of this hacktool is set to "alert". Shouldn't this be a se...
Hello I established an Ipsec tunnel (policy based) between palo Alto and Cisco FW.phase 1 & phase 2 are up and running but trying to transfer data, fail.Capture packet (merge recieved and transmit) shownSource : SYNDest : SYN ACKAnd then Dest : retransmit SYN ACK. If this capture is within transmit pcap, this mean the re transmission packet...
I tried a do-release upgrade on Ubuntu 16.04 LTS and it took me to 18.04 LTS without issue. However minemeld says "Bad gateway" when I try to log into it. I tried to check for updates and figured maybe the source would be changed from xenial-minemeld main to bionic-minemeld main ie)deb HTTP://minemeld-updates.panw.io/ubuntu bionic-minemeld mai...
Hi all, in my security policies on a PA-firewall (or in panorama) I want to be able to filter out all the security policies which have no security profile(s) . I tried a few combinations in the line of (profile-setting/profiles eq 'none') but alas, no joy 😕 Is it even possible?
Is there anyway to check what zone a subnet belongs in if there are multiple zones on the firewall? Preferably through the GUI?
Hi I am adding a Application object and got the below error message. Anyone can give a suggestion to resolve it? Thank you
Hello all,I received from work a MacBook Pro with macOS Big Sur 11.6.2, I've installed the GlobalProtect 5.2.8-23 which is the only one that I had access to, and it seems like whenever I connect the GP, the connection is successful but there is no Internet Connection.As soon as I disconnect the GP, everything is working.I searched on the live co...
From the command line of a next generation firewall i can use 'ping host blah'. Does the CLI have a command to ping a destination via TCP? Or some other tool to do the same?
Hi All, I would really appreciate if some one can help me on this. I am planning to block Torch browser through a firewall rule, using App-ID. But as per information in the community we cannot entirely block the functionality of Torch browser using App-ID. Once we block from the security rule, normal web traffic will go through the firewall. Ple...
