Hello, I need know how to allow create FQDN in PA firewall 3020 and to use URL name instead of adding all IP ranges. Appreciate your help Thanks
Hi folks, Actually I can create a miner that pull an IPv4 list, send it to the processor and to the output. The output is always in that format: 1.1.1.1-1.1.1.1 (for an entry in the list with a single ip) 2.2.2.0-2.2.2.255 (for an entry with a subnet) Is it possible to acheive this instead : 1.1.1.1 2.2.2.1 2.2.2.2 2.2.2.3 2.2.2.4 and so ...
Hello Everyone, I have TCP reset packets being dropped in the Palo when they are sent from tcp-rst-from-server or tcp-rst-from-client. I've taken a pcap to verify the traffic is being dropped. I've put in a ticket with support and their solution was to change the TCP Drop configuration in Zone Protection Profile to not reject Non-SYN TCP. I test...
Much the same as the issue in this post: https://live.paloaltonetworks.com/t5/general-topics/incoming-traffic-from-palo-alto-ip-address/td-p/196099 only with a different set of IP addresses (34.77.162.0 - 34.96.130.0).Telling me that "we crawl on a regular basis" is decidedly NOT an answer!One, I am not a client of Palo Alto or Expanse, Inc, so ...
We have an requirement of blocking old chrome version over Palo Alto firewall.Kindly check for below PA versions and confirm if we can block Chrome User agent below 93 version.
Need to Block Old Chrome version over Palo Alto Firewall.is it possible if yes pls suggest how.
Can you please let me know the name of the certificate for cortex XDR and more about the certification like how much cost involved, Validity of the certification and reference guide so on?
We have a certificate expiring and we just uploaded the new certificate to take its place. To avoid downtime, we haven't revoked the soon to expire cert and have the other one imported already. They are both in valid state. When the first one expires, will the 2nd (new) cert "take its place" automatically? Or will there need to be some manual in...
Our client has LDAP configured with 363 port, ssl/tls box unchecked. having issue with GP connection, showing error as 'ldap cfg SCB_Group_7 failed to connect to server: Can\'t contact LDAP server'.
Hello there,First of all, my English is not very good, so I apologize. I'm new to Palo Alto. So I'm a bit of a novice. In the structure I use, there are 10.0.15.15 - 16 - 17-18-19-20 external world ip addresses. These are separately assigned as mail server, backup, wifi. Let's consider one of them as connecting the 10.0.15.19 Wifi network to the...
One of our clients facing an issue related to the terminal server agent. when the user is trying to connect VMware, it is connecting directly but when the user gets disconnected due to fluctuation in electricity or some other issue that time when a user needs to launch the session again that time it's not getting connected. But if before the ses...
Hi,I started today with paloalto LIVEcommunity. I am currently reading through many pages and as a personal behaviour I try to open interesting pages as new tabs without leaving the current one. After reading the current tab I switch to the next and so on. When switching to a tab from the LIVEcommunity that had been opened for a while within thi...
I hope mapping region and service.but, minemeld is only 1 choice. Example, I want "service": "AMAZON" IP in "region": "ap-southeast-2".How can I match "region" in "service" IP?
Hi allCant get rid off this warning.we have deleted all duplicate certificates but couldnt get out of this warning when commit something
Hi All,I was wondering how can I edit all the security policy rules simultaneously If I want to make any change in specific field. For example I have 80 security rules and I want to change Source Address of each rule so how can I edit this field for all the 80 rules? Do I have to edit each rule individually or is there an easy way to do it? Any ...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
