how to configure email alert without email gateway
Hi, We are having slowness in a traffic when the destination in the security rule is a address-group. If we configure "any" in destination the session are fast. The traffic is 443 (web-browsing). How PA can cause slowness in https if the destination is a address-group? any idea?
When you have multiple device groups, are you able to create shared security policies? When I try to select shared and create a security policy rule, the zones are blank. Only workaround I can seem to find is create a security policy in one device group and clone it to the others
Hi, Came across an issue where a PBF policy match works in the CLI, but not in the GUI. When you run the test in the GUI it just hangs. The PBF rule is working as expected in production, its just the test in the GUI that seems to fail. Anyone come across this issue before? Other PBF policy match tests in the GUI work, so not sure if this is pro...
Hello everyone, We have a Firewall configured for Authentication for LDAP and RADIUS NPS. Both works fine when I force the authentication profile using CLI:test authentication authentication-profile LDAP username user passwordtest authentication authentication-profile RADIUS username user password However, when using Global Protect with an Authe...
What is the User-ID Agent version recommended?
So my company is working to setup a new PKI infrastructure with smart card logins for the users. I have looked at all the 2FA and associated articles about setting up the VPN but it leaves a lot to the imagination. I followed the steps creating the certificate profile and assigning it to the portal and gateway. But when i test it the issue i arr...
Hi, Is it possible to ping a IPv6 link local address from a Palo Alto firewall? If so, what is the syntax on the firewall CLI? I know other platforms allow you to define an outgoing interface when pinging a link local address, but this doesn't look to be available. Thanks in advance.
I have two PA3050s Active/Active, where I already have E1/12 configured as type Layer 3, no sub interfaces. Is it as simple as doing the LACP configurations on the upstream switches and then converting physical interface E1/12 type to Aggregate, then add in E1/13 as a second member. The existing E1/12 has the following objects associated. 2 NAT...
Hi, In this tunnel with a FortiGate, I see the FGT sends its peer id as a local IP and not as the IP which takes part in the tunnel .. So I just modified the peer identification for the local PA to match the FGT private IP peer IP and the tunnel has come up.
I’m facing issue to edit or delete in old rules before create my user account in Palo Alto firewall when I login individually but I can do edit and delete old rules from panorama.what will be the issue and those firewall not connected with panorama are ok to edit and delete to old rules those are implemented before create my user account.
Hi teamCan we directly take backup of PA 500 running PA OS 8.1 to PA 820 running PAN OS 9.0. Thanks in advance.
Hi allI use captive portal on palo alto just zone Lan to internet and found issued about chromeMy client have window 7,8 and palo version 8.1Test on firefox need open firefox and click to option for login to internetBut on chorme not option for click and we try to access website https but it can not redirect to webportal to loginAnyone have iss...
Dear:Good afternoon, what is the best migration option from a Palo Alto PA-850 to a PA-3220. Thinking for example to be able to keep the self-signed certificates in the PA-850, used for Global Protect. Based on your expertix and experience, what is the best way to approach this migration.I remain attentive, thank you very much.Best regards
I read some posts here about the best way to allow github to only *.github.com IPs and I can't seem to find an easy way to do it. If I do it this way: Source IP – on-prem networks Destination - Any APP ID/Service – github/ssh/ssl/web browsing URL category - Custom category for *.github.com Action - Allow That pretty much allows all traffic ...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
