The file type is malicious as per the swift advisory 2021, that need to be block on the Palo alto Firewall.File Type .gmu,.ekt, .jpn,.er,
I was half way through this course and would like to carry on with it but can't find it any more. I Don't want to have to start again.Is there a link to the old course still?Firewall 9.0 Essentials: Configuration and Management (EDU-110)
Hi PA Experts, We have a Panorama (10.02) that we will use to manage multiple firewalls from different companies, so it's a multi-tenant deployment. I have 2 questions for now: 1. One company is concerned about security connecting their FW to Panorama, though we explained to them it's encrypted. So they want to generate a certificate from their ...
Good afternoon, I have a question: I have Global Protect configured and operating, operating correctly Portal and Gateway.When one uses the Global Protect App, it always asks 2 times for login, I understand that one is in the Global Protect Portal and then in the Global Protect Gateways. Is it possible that it only authenticates me once and does...
Greetings all, Taking another look at our user-id mappings with our server team today and we've landed on trying 90 minutes for AD. We set this on the agents installed on two of our AD servers and the firewall is showing the new logs coming in as having the correct timeout. Next, I'm trying to figure out how to do this with our wireless. With ...
We are using SecurityMetrics to test for PCI compliance and have recently started receiving a failure based on TCP/IP Initial Sequence Number (ISN) Reuse Weakness (CVE-2002-1463) for the PaloAlto firewall (5.0.8).I'm not sure how to remedy the problem within the firewall. There have been no rule changes that should have caused this to start to o...
Dear Guys, Maybe my question is simple but I haven't found answer in google so sorry.Is it possible to set automatically a specific logforwarding object to a new policy rule? With this avoiding to be forgetten this setting by anyone who add a new policy rule. Thank you in advance,
Hello, The Top Attackers reports lists:Source AddressSource Host NameSource UserCountIn a report I ran, all of our source addresses are internal addresses. Why is that? Is the report more of a top talkers report than an attackers report? In other words, is the report more of a list high activity accounts or addresses? Is the Count the number...
Hi All, Trying to setup Azure AD SSO with Global Protect, but am receiving the below error. According, to the Microsoft documentation it means that the user is not assigned to the application in Azure, but I can confirm that the user is assigned correctly to the application. Is there anything else I can check?Thanks in advance.
We've been troubleshooting some issues encountered when using the "Enforce GlobalProtect Connection for Network Access" option in our portal agent configuration. Our TAC engineer mentioned that he had seen a setting called "Allow traffic to specified hosts/networks when Enforce GlobalProtect Connection for Network Access is enabled and GlobalPr...
Hi, Anyone can share protocol to setup Palo Alto in GNS3 using palo alto image .ovaThank you very much!
Hi All, As part of a large project I have been deploying PA220's, this has been ongoing for about 2 years and 130 boxes later. When I started the boxes were heavy as, then they were lighter and now we are onto the third variation of the PA220. Is there a list or resource that details the different variations or generations of PA-220's?? Thanks,Adz
How does panorama log storage get handled when it comes to compression formats (panorama vm with log storage attached disks)? We have a setup where our vendor is guaranteeing some storage only if the vendor can compress those files in their own proprietary format. Does anyone know if panorama is compressing/storing logs in a proprietary format...
Hello all,I have a PA-3200 that is currently running PANOS 9.1.7 and going to be updated to 10.1.3 in the near future.I am wondering if I could download version 10.0.0, 10.0.8-h4, 10.1.0, and lastly 10.1.3. I could then install 10.1.3 and it would get the files it needs from the other version downloads and go straight from 9.1.7 to 10.1.3?I beli...
Hello PA World, Need the good community's help to deliver a basic PaloAlto FW course to trainees as part of a Networking Curriculum. Any open source resources that are available for training delivery are invited and thanked for in advance. Have already applied for the Trail VM but it may take 3 or more working days for review, dont have th...
