Hi,What we are trying to do is block domain.com but allow domain.com/api/something1 I tried this in the lab and I'm thinking nope it can't do it, even with SSL decryption it doesn't work!
Hi Team, We have configured Email alert scheduler to get logs daily and monthly. We getting daily logs with attachments and not getting monthly logs and attachments. Sometimes we getting monthly logs email but attachments are not there. PANOS 10.0.5 and tried to restart the mgmt server but the issue is still the same and we observed the firewal...
I understand that a HIP check can be used on the local LAN when the GlobalProtect client connects to the internal gateway. How effective is this as a NAC solution for the internal LAN?Without 802.1x authentication, does a machine without GP installed simply bypass the internal gateway (and HIP check)?Thanks
hey guys, i think it might related to configuration issues, but i cant find what went wrong.the vulnerability profile icon looks like this:but in the policies tab, i get this big red exclamation mark: any ideas if something went wrong?pan-os ver is 10.0.1 thanks in advance,Ishai.
Hello!I have some question about session synchronization in HA Clustering (geographic cluster). All firewalls in HA clustering use the first rule for traffic that should not match it, this only happens on geoclustered firewalls. Later, the rules are processed correctly, but the first one is always used, so I see incorrect traffic in the logs.Exa...
How to identify which windows based user id agent collects a specific user information from Palo alto firewall ?
Hi all.Im looking for a solution to block user access to private gmail accounts but allow a corporate accounts to be used.I'm aware that there is a solution involing proxy server and X-forwarder.Is there any other way to do this without dedicated proxy serever? RegardsLeo
Hey All, We're having a problem in adding new traffic to an existing VPN Tunnel. We've had a VPN tunnel up for a few years working just fine, but now we are trying to put traffic from a different interface into the Tunnel and the PA is dropping the packets (found them in Traffic Capture). The VPN is out to the Internet on Eth1/1 and the origin...
Hi Team, Is there any way to check what is the apache or Nginx version used in the Palo Alto firewall.
Hi Team, We had configured captive portal on the firewall recently. In Authentication policy we had selected source users as any and we are using Active Directory for Authentication. Also we had configured agentless user-id mapping on the firewall and server monitoring to fetch details from AD server for User-IP mapping to feed onto the firewall...
Hello , I have to create 6 Subinterfaces on A/A cluster So i need 3 IP addresses from each VLAN - 1 for FW1 , 1 for FW2 and 1 as Floating IP My question is , do i have to go to each firewall separately to configure the respective IP ?If yes , what will happen if i do commit the 2nd FW , will it create an issue ? Also ,under HA , in active , ac...
Hi All, Facing an error (application icloud-uploading not found) while creating a user on my palo alto 850 using panorama. Attaching the image for better idea. Pls help
How does downstream/upstream switch/router know which is active firewall after failover/failback in Active/passive mode?
IPSEC VPN tunnel got disconnected abruptly. We need to find out what could have caused this from the logs and adjust the VPN parameters accordingly. From logs i found this. ikemgr.log2021-10-15 03:35:112021-10-15 03:35:11.814 +0000 [PNTF]: { 5: }: ====> PHASE-2 NEGOTIATION STARTED AS RESPONDER, (QUICK MODE) <====ikemgr.log2021-10-15 03:3...
Hi - I have an existing SSN configured for a device with ports added in Objects, like to add few more ports. what are steps I need follow? Please let me know....Thanks!
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
