I would like to know when to use Include or Exclude Subnetworks for User Mapping. in other words I would like to know whether it is used when we use agentless user id or external user id agent or in both cases?
We have BGP setup between our core switches and out Palo Alto FWs but I never see any traffic logs for port 179 or application BGP on the Palo Altos. How do I go about seeing this traffic ?
I'm fairly new to Palo Alto gear and wanted to submit a suggestion about adding a sort capability to the information presented in the various tabs/pages. Just a few examples on the benefits of being able to sort: Trying to find that one rule where you know the name of it, but can't quickly spot it because you can't sort the name of the rules alp...
Jabber works perfectly inside my network but the second you attempt to connect over VPN it fails. Why does everything with PAN have to be so difficult.
I have started noticing PaloAlto firewall generating a lot of HTTP brute force alerts with the URL gameplayapi.intel.com/api/games/getagsgames2/ . Do any of you aware of what this could be? I couldn't find anything malicious related to this but I'm seeing so many users reaching out to it. Thanks.
Hello everyone. I wonder if anyone else has had this issue. I'm using Global Protect version 4.1.4 on Windows 10. Everytime I try to connect I get the error "Gateway External: Could not connect to gateway. Please contact your IT administrator" I'm baffled since I can connect to the portal no problem via web browser, tracert or ping. If I conn...
hello everyone Merry Xmas, Our SSLVPN has tunnel split enabled, but I want to allow all my traffic or the *.google.com through the VPN, so I tried:1. added 0.0.0.0/0 to here, does not work.2. added *.google.com to here, does not work. Can please someone let me know do I still miss something? Thanks
Hello. I've come upon an extremely strange situation that I'm hoping to get some assistance on. I've already opened a case with Palo support, but they seem to be at a loss as well. For one specific internal network, the edge Palo Alto is dropping HTTP (80) packets at the internal interface. Even more strange, it seems that packets are somehow ch...
I am deploying Palo Alto SDWAN and the hub currently terminates dedicated L2 WAN circuits for each remote site. My plan is to build tunnels to each site across their dedicated L2 WAN and across the Internet. Example: Palo Hub connects to site 1 on e1/1.100, zone: site1Palo Hub connects to site 2 on e1/1.200, zone: site2 The current security poli...
PA2020 had factory reset its show Unable to create directory /mnt/panrepoand can't into maintCan someone explain what the problem is?
Can anyone tell me if this is legitimate or if it's a false positive? My Cortex XDR hasn't found any behavioral issues to go along with it either.
Hi,I have the below topology PA has two 40 g ports and my core has 4 40g ports . server SW also has 40 g ports ( the switch is for connecting servers ) core required two 40g Ports for cross-connection.So remaining two 40g connections,Do I need to use it to connect the DC fW,or yes which link ?or Do I need to use it to connect to server swit...
Hi Team, We had configured LDAP authentication on Palo alto firewall. The LDAP server had been configured and we had checked the connectivity and it was successful. Created an group mapping and included an group in the include group mapping. Checked the groups and the user details via CLI of the firewall and could see that the user under the in...
Hello, We have an issue with forwarding an IPsec connection to a VPN device behind the PAN-OS FW. So the setup is supposed to be the following:* PAN-OS is using outside interface 192.168.1.1/24* 192.168.1.2 is an address with DNAT to 10.10.10.1 on an internal vlanNote that the FW also processes IPsec VPNs itself on its own IP 192.168.1.1. NAT ru...
Hi NAT is setup at PA for outside users to reach DMZ server based on protocolThe topology is like the below:SW1(f1/1) -------- (e1/1,DMZ)PA(Outside,e1/5)--------(f1/5)SW2Interface config:e1/1 10.100.255.1/24f1/1 10.100.255.2/24 as inside Servere1/5 44.33.22.1/24f1/5 44.33.22.2/24 as outside UsersPlease see below PA configurations for NAT and Sec...
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
