Hi, Palo Alto firewall is VM in ESXi. In the ESXi, I can see the firewall interface e1/1 , e1/2 and e1/3 are up. but I do not know why we can see the firewall e1/3 is down. Anyone can advise this? Please see the below. Thank you
Hi Guys, We are not able to access nated ips from GP full tunnel scenario. We have 50+ hosted servers publicly and we have GP in full tunnel mode. All the nated servers are accessible without any issue but when we connected to GP in full tunnel we are not able access it. need you suggestion on this to achieve it
Dear Community, We have a few Palo Alto firewalls in several locations where we are seeing a weird behavior.The firewalls are connected directly to switches and in some ports of the switch we see two learned MAC addresses: one 001b17-XXXXXX belonging to the FW´s interface but also another one 34e5ec-XXXXXX for which we cannot find explanation. B...
Hey guys one of my customer wants to block personal gmail (google mail) for eg : [email protected] want to allow the corporate Gmail eg : [email protected] what are the steps to configure this type of request please help us.
the error above pops up when i try to commit changes... i guess my policy changes not are done ? And how to solve this error ? Unfortunately i have an old version running, upgrade is due next month. Currently running 7.1.24-h1
Currently we are facing an issue with Emails which are not sent from palo alto firewall.We have created a setting to send mail with reports but we are getting below error listed. Connection to smtp.google.com 465 failed. Failure when receiving data from the peer Please share any document related to this error and a recommendation for this.Cheers.
hi, We have found that after upgrading from version 9.0.12 to 9.1.11 the average temperature of the computer has increased.Before, all parameters were usually below 40 degrees Celsius. Kind regards
Is it possible to integrate own SSO using SAML to get access to support.paloaltonetworks.com and other products like XDR? Is there any feature request portal in case this integration isn't yet possible? I noticed that currently to secure such sensitive portals for paloalto products only 2FA (using either email or OTP eg. google authenticator) is...
Hi Team, We are facing issue with bellow error while starting the firewall up.Also sometimes the firewall is not coming up so we need to reset the firewall and have to upload the configuration files to bring the production up.Please provide a solution to the below error from the system log. [critical hw bootstrap-image-error 0 No bootstrap media...
I am at my wits end with this. Can anybody tell me what I am doing wrong here? I'm trying to make a script that will use the API to stand up L2L VPN tunnels, and there is something in this request that is making the firewall puke (error 18 "Malformed Request"). The API calls:making the gateway, this works just fine:curl --globoff -X GET "https:...
A few days ago on one of our Palo Alto firewalls the primary (MPLS) line was down (not the provider router, somewhere between there was a broken cable) and traffic was routed over backup (Internet). Because provider router was up, the interface on Palo Alto was up, so this was no indication for traffic routing over backup.I only could see this i...
Hello everyone, First post so please be gentle. I need to have a security rule to allow the Bitdefender application on my servers. Part of the Bitdefender application requires explicit web-browsing. That is obviously easy enough to do. My problem is that I don't want users to then be able to browse the web from those servers but because I have e...
hi, I had a firewall palo alto with the version 9.0.12 and i upgrade the version to 9.1.11 after this the temperature pass of 30 grades to 60 grades. Why after upgrade the temperature changed? Kind regards
Hello Bros' Recently, I have issues with the application called Psiphon, this app is eating my internet based on authentication portal page.As I check previous threads in the community, all speaking about a decrypted traffic or blocking an applications that are vital such as http-proxy,ike, ipsec, l2tp, ssh, ssh-tunnel.it a virtual...
As you all know, Palo Alto gives you two ways to exclude sites from decryption. Are there any scenarios where excluding from SSL Decryption Exclusions works but setting the same url in a decryption policy doesn't? I ask because I've had the scenario where I get a certificate validation error using an app, I look at the cert and see it's for a U...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
