Does NAT64 works for inbound NAT

Currently we have configured inbound NAT for DMZ application which is on ipv4. Public ip used for it is ipv4.Due to some requirement client from outside network will be coming from ipv6 public ip to access the application. In this case our nat is not working. We have found NAT64 feature in below doc , but given example is for outbound NAT. http...

Is my firewall hacked already ?

I have a PA3020 with 7.0.5-h2 PAN-os version. I noticed that it have a lot of DNS traffic sent to strange IP address. when I running show system resources command. I found strange process nginx and two syslog-ng there. Is it normal, how to get rid of them ? 2797 nobody 20 0 53388 5712 3344 S 0.0 0.1 8:19.70 nginx6804 nobody 20 0 107m 12m 6472...

is it possible to limit destination ip address with in time frame

i have a senior here, single source IP address should not connect to more than 300 destination IP address with in certain time limit. is this possible ??

Something aking to | sort | uniq -c | sort -nr

Like the title says, is there a way to run a filter for a period of time, pull out a list of IPs, sort them, remove the duplicates with a count, and sort them by most popular?This is a common omegle thing to do with syslog data, say you have a very permissive rule and you want to see what source IPs are being used by that rule. You could awk pri...

Allow redirect URL with decrytion on.

Hey guys one of my customer I not able to access the Redirecting URL's This Error display (err_http2_inadequate_transport_security)I checked the logs the traffic URL shows alert but the decryption is done.We are able to Access the URL without decryption. Created a specific decryption policy in which it enables the Strip ALPN. and we are able to...

3rd party managed minemeld feed to local

We have a service provider(SP) with authenticated minemeld feed and we want to pull feed from the SP minemeld which asks for authentication into our local minemeld instance, instead of directly into our firewall. How can we do that.

ALERT WHEN VPN DESTINATION STOP WORKING

Hi everybodyCurrently have a vpn connection to a remote site , and now we are transferring many info along the dayBut sometimes connection closes and transfer interruptsSo we want to sent alerts when this connection o transfer interrupts to be able to sends a kind of email alert Is it possible?

I keep getting crashes with Version 6.0.0.2 of my driver for my PANGP Virtual Ethernet Adapter.

I keep getting NUD.Sys crashes on my PC and that is network related (apparently) and its most irritating as it keeps crashing and having to restart which isn't that problematic apart from when i'm working remotely, which is every day. So any advice would be lovely!

Does GlobalProtect refresh USER-ID bindings mid session?

The GlobalProtect section of the Admin guide for PAN-OS 8 says the following:For mobile or roaming users, the GlobalProtect client provides the user mapping information to the firewall directly. In this case, every GlobalProtect user has an agent or app running on the client that requires the user to enter login credentials for VPN access to the...

SD-WAN Hardware Change / Migration

We have been running SD-WAN since release a year or so ago, regular PAN-OS SD-WAN not Prisma SD-WAN. All the sites were deployed with PA-220 at the time, but we are rolling more sites in and I need to swap a couple of the PA-220s with a PA-440. Anyone done a hardware replacement of an SD-WAN device, that is being repurposed? I followed along t...

How to deploy the Palo Alto Firewall in GNS3

I want to download and install the PA-VM-KVM-8.1.3.qcow2 file on GNS3 but I`m not allowed to.Can anyone please tell me the steps to getting a PA-VM for GNS3?

Replacing the Revoked QuoVadis Intermediate Cert

For the benefit of anyone else who was using a QuoVadis certificate for their GlobalProtect portals/gateways (or presumably decryption), the process of replacing that intermediate is surprisingly easy. Just import the new intermediate certificate using exactly the same name as the old intermediate certificate and it simply gets replaced. Which s...

Device showing not connected in Templates