Log Forwarding - are changes disruptive to PAN firewalls?

Hi Gang,

We need to update our log forwarding to now include Syslog. Previously they were only uploading to Panorama. It was also previously shared but we will need to make it device group specific now as we have local syslog servers for local sites.

Ransomware Prevention / Detection / Response Resources

There are many articles, guides, and resources available across various Palo Alto Networks properties to guide users on how to best protect their organizations from ransomware. After spending some time to find many of them, I thought I would share wi

SAML Captive Portal

Hi All,

i'm trying to configure a SAML authentication for captive portal but when i'm trying to export metadata and selecting captivel portal i'm not able to export, it shows no option:

if I try to type an address and click ok the file generated contai

PaloAlto TAC support has gone missing

Opened a S2 (high) ticket at 11am ET this morning about panorama in High Availability in suspended mode after upgrading from 9.1.9 to 9.1.10.  No response from TAC support after two hours.  I called in and have been waiting for over an hour with no o

Java Cert error due to decryption?

My organization is in the process of moving from one VPN solution to GlobalProtect. We are seeing several applications being unable to run certain features, or run successfully at all, and the error logs appear similar to this (I say similar because

How to allow policy destination by URL

Hello,

I need know how to allow create policy in PA firewall 3020 and add destination as URL name as (microsoft office 365) instead of adding all IP ranges.

Appreciate your help

Thanks

global protect vpn with DUAL ISP

Hi Team,

we have two isp link with ecmp load-balancing enabled. we only have one virtual router setup. we have configured GP vpn portal with one isp interface and how can i configure the GP vpn with second isp link as well. we would like to have two

Global Protect Enforcement Bypass

Hi All,

I understand that this is a Microsoft related matter however I'm interested to see if anyone else has come across this issue.

With Global Protect Network Enforcement in place (through the Portal Config), it is still possible for local admins

Configuration checks against CIS security benchmarks

Hello All, Do any of you compare local firewall or Panorama configurations against CIS benchmarks for security compliance checks ?

Either using an existing tool to check Firewall compliance with the CIS (Centre for Internet Security benchmarks) recomm