Hello,We are detecting that several PDFs that we share on our internal network are being detected as VIRUS.As we have the antivirus profile enabled in a security rule the session is reset .Does anyone know how I can avoid this?Regards
Since updating Global Protect client, I can no longer connect to VPN. I can successfully connect to all our other sites. I’ve tried connecting on the OSX client & Windows Client. System logs suggest login succeeded. See screenshot attached of failure notice. GlobalProtect Logs show below. Nov 03 19:45:45:53609 Debug( 308): SSL connect f...
there are two location site a and b in which i created a ipsec tunnel between them its up.As i ping there LAN IP i am able to ping. there LAN networkSite A LAN network is 192.168.4.x/24 Site B LAN network is 192.168.x.1/24.I am able to ping both the interfaces by cli and also check logs that are going through a tunnel.But the issue there are IPs...
Hi Team I have a concer where we have a scenario.(Branch office )Sophos -----------ipsec----------- PA(head office) Could Sophos users that is branch office inhouse users connect to GP configured in Palo Alto firewall which is in head office. This communication should be via internal gateway not the external gateway. We have IPsec tunnel in plac...
I have a couple of firewalls that are running Pan-OS 9.0.3 that I cannot get the pandb-database to install and update. At least I cannot prove that it is downloading and active. Until 9/30/19, the 9.0 docs for this were the same as the 8.1 docs. According to the new docs, it looks like PANDB is active, but when I check the status on 9.0, it show...
I have two Panorama Servers, let's call them North01Pano and South01Pano. I also have two Log Collectors, let's call them North02Pano and South02Pano. Obviously the two LC's are system-mode: Logger. What is the preferred mode for the 01's and why?
Hi All, Can someone guide me to where I can obtain an export of all the configuration changes made on the firewall and potentially export this into a csv?
Is there anyway to have the palo email me when a rule has been enabled for a certain period of time? If not, is there anyway to do it via API? There has to be a way, yes?
Hey guys hope you doing well One of my customer have an issue to fetch PANOS version.PA-220 Current version 10.0.0The dynamic updates are not up to date as i see the latest dynamic updates installed on her firewall are month of april 2021.Also i am not able to fetch the latest PANOS.I checked the service route and policy for PANOS upgrade.Also ...
Hi guys,I am studying currently for PCNSE certification. What palo alto application I should download if I want to practice? I am using an apple computer. I would appreciated if someone can send me a link about it. Thanks in advance
I cannot commit changes on a PA-850 running 10.1.3The error message shows below. What is the cause of this error?---DetailsFailure parsing config response (Module: dhcpd)client dhcpd phase 1 failureCommit failed---Duplicate certificate subject foundWarning: tunnel tunnel.2 ipv6 is not enabled. IPv6 address will be ignored!
Hi, We are enabling SSL-decrypt for several categories in our FW. We realised that the CPU and memory increased since this config, but its so far about the maximum in datasheet for PA3050. How can we know the SSL decypt consumes and try to have any reference about this?
2Dears, i have PA-220 with running 10.0.x, version I am observing the management CPU is constantly reach up to high 100%. when I check the system resources the PAN_TASK process is always taking high CPU utilization up to 100%.I downgrade the firewall is 9.1.4 and 9.1.9 but the same issue is happening,As well as I checked while committing the PA ...
Just watched an interesting way of hiding C2 traffic which bypasses Palos in the demonstration. Would be good to know if there is solution to capture this.https://www.youtube.com/watch?v=eVr0kKdgM2I
Hi, I have a requirement where two scenario, Branch office and Head Office. ++Branch office has Sophos firewall and Head office have Palo alto firewall.++Branch office users are enforced with using Global Protect when they are outside of the organization that is BO(Work From Home). Which the GP will directly connect with HO.++When the same user ...
PavelK
on:
Replacement of RMA
