Any technical considerations to renaming device groups?
Hi All, 1st Post so hopefully i'm doing this correctly. I am trying to setup a VPN tunnel to a 3rd Party. We have a PA-3020 and they have a Cisco ASA. They do have another Cisco in-between both our devices which is performing NAT. Hence we have enabled NAT-T. The main issue I am having is that the tunnel is not coming up. The error message I get...
Documentation says we should measure CPS for creating baseline. I have done this for last 20 days collecting CLI output every 3 seconds and have Panorama data to back it up. Below is last 7 days data, CPS never peaked beyond 20K and on average is below 4K.Using Syn-Cookie Max Threshold is 35K and activate as Zero. So it should start dropping pac...
I would REALLY like to find a way to automate offline dynamic updates. I’ve been trying to script the process with a bat file and plink. I can get it to login with SSH but nothing after that. I found a post, link below, on here from about 5 years ago, that suggests what I’m trying to do may not be possible. Hopefully something has changed. ...
Hi Community,I got a strange problem and want to hear, if someone got the same.We got a Panorama managed PA-3220 PAN-OS 8.1.7 with GlobalProtect portal, external gateway (which share the same IP) and an internal gateway.The external gateway got a certificate profile defined, the portal not.If I open the Webpage, the Portal prompts for a certific...
PA-220 with ISP1 and ISP2 and VPN to Cisco ASA 5515x failover for ISP and VPN - is it possible. If yes, can somebody post detailed instructions or help in private?
Hi,I am getting the below message ,there is no specific interval (around 30 min) it countinously happens from three days .What is the action need to be taken HA Group 1: Local HA2 keep-alive up04/15 14:57:47HA Group 1: All HA2 keep-alives are down04/15 14:57:39HA Group 1: Local HA2 keep-alive down04/15 14:57:39 How do i begin the troubleshoo...
Hi All, I have a number of VM-Series perpetual licenses with subscriptions that are due for renewal and would like to migrate to flexible licensing so I can purchase credits to add new subscriptions. I've found the process to do this as follows however I'm looking to understand what happens to the perpetual license entitlement that I have for VM...
Hi All, We have a range of PAN models and try to upgrade them all to 10.0.7 but find out the PAN 3020 does not have 10.0.7 available yet.Either in CSP web site or software update on the firewall. Do i miss a step somewhere ?Please help.ThanksLeQ
Dear Team, I have configured the web service behind PA. and attached the security profile . i can see in the thread logs the thread is generating "Suspicious TLS Evasion Found(14978)".i have gone through the below KB but didn't understand https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HBwCCAW&lang=en_US%E2%80%A9 mo...
Hi, We use GP to connect to our company. So when i open a RDP to internal server using administrator user, my local mapping change also to administrator. We are using agentless for userid. What option do we have in order to keep the local mapping? i read about adding to "ignore user list" but i can not click OK when i add a user.
Some of the customers are experiencing following errors with PAN devices (updates OS 8.x) that use WildFire EU (about 5-10 per day at random times): Event: 'wildfire-conn-failed'Severity: 'medium'Description: 'Failed to perform task multiple times resulting in connection timeout with WildFire Cloud eu.wildfire.paloaltonetworks.com' If they chang...
Hello,We have a 3200 series HA cluster active/passive version 9.1.10.The requirement is to access through a single ip always to the active node.That is, I have an IP for the active node and another for the passive node but I want to configure a single IP to access the active node either one or the other.Can anyone help me to configure it? How do...
Does anyone have any ideas on how to permit access to Google Maps but block access to all other Google services? I have tried using a rule matching the Google-Maps application however it requires google-base which allows many other Google services. I have also tried using custom URLs for maps.google.com and www.google.com/maps; however, Google m...
We just got our PA-3220 and hoping to use that for our URL/Web filtering and discontinue our Barracuda Web filter. Has anyone implemented the URL filtering with terminal server users?
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
