Is it at all possible to determine circuit capacity directly from the PAN?Esentially what im trying to do is run a intenret speedtest directly from a PAN.What would be perfect is the ability to run an iperf client direclty off a PAN
Hello everyone!I am experiencing an odd problem.I have 3250 HA pairs. I have configured 2 aggregate(L3 trunk) interfaces and added sub interfaces to these aggregate.The first problem is the firewall itself can not ping directly connected device by using "ping source x.x.x.x host y.y.y.y" command.Every sub interface has management profile assigne...
I have a ESXI Server with firewall (Inside, DMZ and Outside) zonesPalo Alto has a security rule to allow interzone traffic from inside to outsidePalo Alto has NAT configured for Outside Interface When I try to ping from host to host on in the same port group...all is good.When I try to ping from host to the Inside Firewall Interface, the ping ti...
We are in the process of migrating our DMZ servers out from behind an ancient ASA to our Palo. I pulled a test webserver over to make sure my NAT was set and to trial out some rules.For the most part everything is working but I can't ping out from a server in our DMZ zone. We are using GlobalProtect for our VPN and from the vpn zone I can ping t...
How can I block community member repeatedly posting questions on https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/tac-p/441609#M523?
Hello -For various reasons we no longer use "default" for log forwarding as a log forwarding profile and actually delete it and have a new one, let's call it Log_Forward. When a new rule is created, if default is still present, it will autofill the Actions tab > Log Setting > Log Forwarding with default. If, as in my case, we don't have d...
I have applied threat id exception on antivirus profile, can i get the logs for those id in threat logs.
Hi Team, We have FIX WEAK CIPHERS AND KEYS ON THE MANAGEMENT INTERFACE FOR SSH ACCESS with help of the below document.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PN5bCAG As of now, we are not able to access the firewall management SSH access. we required FW mgmt SSH access. Firewall in HA MODE, the secondary firewal...
Hello,I have configured the Captive portal but i am not able to open the web page.PAN-OS version- 9.0.9Below is my configuration:-1 - LDAP authentication2 - Configured interface management profile with the check response page.3 - enabled user identification.4 - configured authentication policy.5 - Apply forward proxy decryption. After some troub...
Hi, I have setup Cortex XSOAR. However, i'm still confuse what i can do with this platform.. Someone said, i can integrate my Paloalto Firewall with Cortex XSOAR... Is there anyone here, know how to integrate my Palo alto firewall with Cortex XSOAR?
Our current environment has two PA-850s connecting to two Cisco Nexus switches. Each PA-850 has a fiber connection to each Nexus. The Nexus has a configuration of a single port-channel covering all four fiber links. Is this how it should be done, or should I have a port-channel for PA-3220 (1) and another port-channel for PA-3220 (2)? Current...
Hi All,I am curious to know which technology is using in Panoroma logging disk to store the logs or disaster recovery. I have added 6TB virtual disk in panoroma now it is showing DiskA, DiskB, DiskC,DiskD, DiskE. If any one Disk get faulty how data will get from the faulty disk.
Hello Palo Alto Community, I have a question regarding moving https traffic off a rule to another existing rule. The traffic being moved is critical to operations and cannot be disrupted. For this reason I've been asked to confirm the behaviour of this change. I don't see any issues with proceeding however would like to confirm the impact. My th...
Hi,Is there and if so what is the difference on processing speed of a PA rulebase when most hit rules are on top vs when most hit rules are spread throughout the rule base?For example: Imagine a rulebase of 15000 rules. What would be the processing speed difference if a certain rule is hit 10000 times a day if it's on top (say 1th rule in the ru...
Hey i am here on paloalto website in search of best platform from where i can take preparation for exams, i want to start my preparation for exam but i have no much knowledge about this exam. Did someone knows about this exam and have genuine tips.
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
reaper
on:
Server monitering -Connection refused
