Hello We have a issue with Global Protect, we have upgrade to 5.2.8 and the AV Microsoft Defender ATP is not work properly: In the last version (5.2.5), there is no problem with AV:
Hi Team, Usually we are working from office and there is no issue when accessing PA CLI or web interface.Now when we are working from home and connecting to GP, we still can access and is there any ways to block the access? If we are not connecting to GP, there is no issue.
Hi Team, Can you please advise how to build a miner to map all salesforce.com IP's?
hello everyone We have a intermittently issue with GlobalProtect client and the local DNS resolution. We have conigured local dns servers on network services and we have established "Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)": YEThis configuration is working fine, but intermittently, the local DNS servers are not ...
We have reports of certain users not being able to access our public website but majority of users are able to. The traffic log shows that the application is incomplete. Packet capture reveals the 3-way handshake does not complete and the session times out. The same person who is NOT able to access the public website is able to access another we...
Dear All,Can Palo Alto firewall works as explicit proxy for internal usets ? Appreciate sharing official article .
An issue where I can’t view any configured IPSec Tunnels in GUI,From CLI, the IPSec tunnels appear normally. Tried failover, restarting management service, even rebooting both Palo Alto units, using different browsers, different computers, and export; import and load the configuration file with no success. Device Model: PA-5220 HA Mode Active-st...
Hi, I have a customer who was a PA-850 firewall. There connection to their LAN is currently using a 1Gb Ethernet port (Port 4). They are in the process of upgrading the network backbone to be 10Gb and wanted to change their connection to the Firewall to 10Gb too. Is there any easy way to migrate all of the settings they have setup from port 4 to...
I am trying to block Windows 7 clients from accessing the internet. I have followed the steps here: https://live.paloaltonetworks.com/t5/Configuration-Articles/Custom-vulnerability-signature-for-identifying-Windows-XP/tac-p/72273#M1496but I am unclear on what to set for the Pattern. Any suggestions/help to accomplish that goal will be apprecia...
Hello,as described in the "GlobalProtect 1.1.6: Addressed Issues" (issue point 35361) the unnecessarily reconnection after sleep/hibernate mode should be fixed.We are using the GlobalProtect Version 1.1.7 . The portal configuration are:"On demand" mode, as authentication "certificate profile" only,single sign-on on, agent user override disabled,...
Hi,I am trying to create a custom app that will match CRL downloads, to allow them without any questions ask. Shouldn't be too hard : on a previous web security gateway, I would match a pattern like the following: "http://([^/:])*crl.*\.crl"When translated to an app signature, I already know I am looking for two patterns, on the following contex...
Hi support, May I know the upgrade file for PAN-OS 9.1.11-h3? I could not confirm it. Below is my environmentPA-5200 platformVM seriesPanorama M images Thanks !!!
I am looking for a legal copy of PAN-OS OVA is there a way I can download?
Hi, we're implementing Defender ATP as an anti-malware solution. I would like HIP checks to restrict Global Protect connections from clients without a recent AV scan performed, without Real Time Protection Enabled or with out-of-date virus definitions, however the GP Host profile on the client doesn't collect this information: Many full scans h...
Dear community! I´d like to consult with you for a possible solution for this scenario:We have 2 internet lines from two interfaces of the PAN firewall connected to two different routers. Each interface is in a different zone.When incoming and returning packets follow different paths then we have an asymmetric routing condition. Situation simila...
PavelK
on:
handle (username) change?
PavelK
on:
Replacement of RMA
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
