Blocking outside-to-outside blocks ping from outside interface. Is that ok?

Hi Gang,

First, thanks for having a look and a big thank you for taking the time to respond.

I recently created a security policy rule that blocked outside-outside zone traffic. I did this due to outside traffic that did not match any NAT rules, for

GlobalProtect Use Connect Before Logon is not compatible with Pre-logon(Always On) ?

Hello to All,

We are use globalprotect with Always-on and "Enforce GlobalProtectfor Network Access" and blocking the users to delete or disable the globalprotect app. This way we are forcing them to always use the VPN. We are planning to test "Conne

Is PANOS 9.1.6 is vulnerable for wreck security vulnerability?

Hi guys,

Im having a query whether any of the PAN OS has the vulnerability as wreck in Palo alto network firewall. If so kindly update me here.

I have searched with the PAN Advisory as well as other portals. like these https://www.cvedetails.com/vulne

Hybrid model (where some exchange mailboxes are hosted in Microsoft 365) (using DNAT) Palo Alto inspect the traffic be regarded secure enough?

We have clients who want a Hybrid model (where some exchange mailboxes are hosted in Microsoft 365) rather than full blown integration.

Would the proposed solution (using DNAT) with the sources constrained to the Microsoft approved IP/URL list and ha

Error Palo Alto Global Protect on MacBook

Commit Error Messsge for Application being used

We noticed last month that a core firewall PA-3060 has started reporting the same error message as in this link. Application being already in use. We have provided tech support files to PAN support but they are still unable to determine the reason th

Data Filtering logs not in Panorama

Hi All, we are running 9.0.12. I've got data filtering with the patterns etc all set up. The logs appear fine on the firewall. And logging profile is set to forward all to Panorama, but none appear in Panorama. It's empty. Logging profiles is set to

SSH to Management interface (RADIUS Auth) PAN OS 10.0.4

Working on an HA Pair of PA-820 firewalls and just finished configuring auth for management interfaces. Went to test, and found that the firewall said auth succeeds, but the SSH connection immediately drops.

Config:

• Auth profile is RADIUS (Windows NPS

how can i limit the Maximum Number of connections per ip

Hi everyone 

                    i have a question is how to limit the maximum number of sessions per ip or per zone ?  

                    hope someone can help me.

Enabling multi vsys on a prod firewall.

I’m planning to create multi vsys on my palo alto. I just wanted to know if my existing configuration (interfaces, aggregate interfaces and rulebase) will be moved as it is to vsys1 or they need to be mived manually?

I have aggregate interfaces layer

HA1/HA2 speed recommendations for a PA5200 series setup (A/P)

I'm not sure if this documentation exists somewhere but I can't seem to find it.


we have a customer with palo alto 5200 series firewall.
due to covid-19 (as is the case with so many companies they are currently production stress testing the firewall wi

HELP: HOW TO BLOCK BITTORRENT ON PALO ALTO?

Hi Guys, Asking for your help to block bittorrent or utorrent? or blocking p2p?