Is there anyway to check what zone a subnet belongs in if there are multiple zones on the firewall? Preferably through the GUI?
Hi I am adding a Application object and got the below error message. Anyone can give a suggestion to resolve it? Thank you
Hello all,I received from work a MacBook Pro with macOS Big Sur 11.6.2, I've installed the GlobalProtect 5.2.8-23 which is the only one that I had access to, and it seems like whenever I connect the GP, the connection is successful but there is no Internet Connection.As soon as I disconnect the GP, everything is working.I searched on the live co...
From the command line of a next generation firewall i can use 'ping host blah'. Does the CLI have a command to ping a destination via TCP? Or some other tool to do the same?
Hi All, I would really appreciate if some one can help me on this. I am planning to block Torch browser through a firewall rule, using App-ID. But as per information in the community we cannot entirely block the functionality of Torch browser using App-ID. Once we block from the security rule, normal web traffic will go through the firewall. Ple...
How to check which PAN OS is compatible to my virtual hardware or Physical hardware ? I would like to know minimum hardware requirements for PAN OS versions 9.1,10.0,10.1. Kindly let me know it for both Virtual and physical Panorama and firewalls
Hello everyone, Before the question, the context.I have a panorama wich managed a lot of devices groups. we have a lot of rules for them. Which all these rules uses the default profile for log forwarding.I have a new syslog server and i need to forward the logs from all the devices and not from panorama. I created the new syslog server and i man...
After reviewing this KB article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSOCA0 It looks like you can create custom vulnerability signatures for named browsers. Could you also do that to limit browser access via a security policy based on a minimum version number? For example: create a vulnerability signature...
Is there a way to match the next "X" number of lines when piping to match at the cli?I am entering:show zone-protection zone outside | match udpand would like to show the matched line and the next three.This would be analogous to grep -A 3Cheers!
Hi All Can anyone tell me the Zone protection profiles disadvantage or drawback
Hello,I configured zone protection, (reconnaissance protection), and enabled the tcp\udp port scan and host sweep and chose the default as action "alert".Afterwards, I noticed in the monitor logs this vulnerability appeared, "ZGrab Application Layer Scanner Detection". The severity is medium. Where do I change the action? I can change it in the ...
Hello, I'm attempting to setup a few remote sites to a Hub site all sites have a Palo Alto 3260 firewall. All remote sites have the same internal IPs and subnets on the Trusted side and I'm needing to connect all sites using a IPSEC VPN. I would like to Source NAT but cannot find the documentation to assist in setting this up using IPSEC. Als...
Hello, Currently, we are installing the Cortex XDR agent on Debian servers. We have followed the steps as the documentation says. But, when the services are gonna be started it shows an error: "sbin/service: not found". All the services show "Stopped" status. If I check the "/opt/traps" directory and if I run the command "dpkg -l | grep corte...
We will be upgrading our internet connections from 1GB to 10GB. What is the process to change from a 1GB copper (eth 1/2) to 10GB sfp+ (eth 1/14). I've run through the configs and I'm assuning any specific reference to that interface will need to be changed. I'm assuming this will need to be done for Interface, Zones, Router, ipsec tunnels, GP g...
Hello,I have a 5250 managed by a Panorama.On the firewall I have 4 Virtual router and I have to delete one because it's unused.Can I simply remove the VR via panorama by select the VR and delete it or there is some steps that I have to follow?(remove the interface from VR before or similar?)Note: Each VR it's a OSPF member.Should I expect an out...
PavelK
on:
Advanced URL License
PavelK
on:
Commit Failed
BPry
on:
SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
TomYoung
on:
FWs no longer forwarding logs to Panorama
