Dear All,Can Palo Alto firewall works as explicit proxy for internal usets ? Appreciate sharing official article .
An issue where I can’t view any configured IPSec Tunnels in GUI,From CLI, the IPSec tunnels appear normally. Tried failover, restarting management service, even rebooting both Palo Alto units, using different browsers, different computers, and export; import and load the configuration file with no success. Device Model: PA-5220 HA Mode Active-st...
Hi, I have a customer who was a PA-850 firewall. There connection to their LAN is currently using a 1Gb Ethernet port (Port 4). They are in the process of upgrading the network backbone to be 10Gb and wanted to change their connection to the Firewall to 10Gb too. Is there any easy way to migrate all of the settings they have setup from port 4 to...
I am trying to block Windows 7 clients from accessing the internet. I have followed the steps here: https://live.paloaltonetworks.com/t5/Configuration-Articles/Custom-vulnerability-signature-for-identifying-Windows-XP/tac-p/72273#M1496but I am unclear on what to set for the Pattern. Any suggestions/help to accomplish that goal will be apprecia...
Hello,as described in the "GlobalProtect 1.1.6: Addressed Issues" (issue point 35361) the unnecessarily reconnection after sleep/hibernate mode should be fixed.We are using the GlobalProtect Version 1.1.7 . The portal configuration are:"On demand" mode, as authentication "certificate profile" only,single sign-on on, agent user override disabled,...
Hi,I am trying to create a custom app that will match CRL downloads, to allow them without any questions ask. Shouldn't be too hard : on a previous web security gateway, I would match a pattern like the following: "http://([^/:])*crl.*\.crl"When translated to an app signature, I already know I am looking for two patterns, on the following contex...
Hi support, May I know the upgrade file for PAN-OS 9.1.11-h3? I could not confirm it. Below is my environmentPA-5200 platformVM seriesPanorama M images Thanks !!!
I am looking for a legal copy of PAN-OS OVA is there a way I can download?
Hi, we're implementing Defender ATP as an anti-malware solution. I would like HIP checks to restrict Global Protect connections from clients without a recent AV scan performed, without Real Time Protection Enabled or with out-of-date virus definitions, however the GP Host profile on the client doesn't collect this information: Many full scans h...
Dear community! I´d like to consult with you for a possible solution for this scenario:We have 2 internet lines from two interfaces of the PAN firewall connected to two different routers. Each interface is in a different zone.When incoming and returning packets follow different paths then we have an asymmetric routing condition. Situation simila...
Hi Team, We have a setup like GP VPN and cisco duo. When a user is trying to connect to GP it will send a request to the cisco duo and once the cisco duo will approve the connection, the user will access the GP. One of our system is not working properly. It will give the error "Unable to establish the connection and please restart your computer"...
I have alot of tunnels between nodes, and it seem periodically one will hang, almost like a zombie process.Is there away to break/kill this tunnel down without taking the other tunnels down?
Hi guys, I was wondering if anyone has any experience using a totally airgapped panorama/firewalls deployment.At the moment I have a case where none of the devices are allowed any outside connections.I thought it would be do-able since both software and content updates can be manually uploaded to panorama and deployed like this, and license keys...
Hello, I need know how to allow create FQDN in PA firewall 3020 and to use URL name instead of adding all IP ranges. Appreciate your help Thanks
Hi folks, Actually I can create a miner that pull an IPv4 list, send it to the processor and to the output. The output is always in that format: 1.1.1.1-1.1.1.1 (for an entry in the list with a single ip) 2.2.2.0-2.2.2.255 (for an entry with a subnet) Is it possible to acheive this instead : 1.1.1.1 2.2.2.1 2.2.2.2 2.2.2.3 2.2.2.4 and so ...
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
