Captive portal asking credential for known users, what is the solution
Hello I Have a Cluster active-passive PA-820 version 10.0.7 I am receiving the following system events continuously I have configured eu.wildfire.paloaltonetworks.com and wildfire.paloaltonetworks.com but the problem persists. Can someone help me? Thanks so much
Can you use a verizon mifi to connect to a globalprotect vpn tunnel? This is so they don't have to install the gp client on their pc. We do not have licensing for gp to be used on phones and to me a mifi is kind of a glorified phone.
Hi Team, We have GP 5.2.5 on PAN OS 9.1.7Connection method is pre logon then on demand.on GP Gui logs i see error Error authentication check failed for ( eventid eq gateway-hip-check ) Even though we do not have hip check enabled on the GP.Is this error by design?how can i get rid of this error from gui logs?any config i need to modify?
I have around 500 policies having 'log at session end' enabled and 'log at session start' disabled. I know Palo recommends logging at session end only but I also have a concern that for eg. a malicious file export that lasts for 8 hours and 10gigs go unnoticed if the session wasn't logged at the start. I am in a dilemma to enable the logging at ...
Hello, I want to achieve IPv6 dual stack configuration on PA-850. What are the requirements for this type of configuration? For IPv4 traffic will hit to our IPv4 configured wan IP and for IPv6 traffic will hit to IPv6 configured wan IP. Please enlighten me how can I achieve my requirements. @SutareMayur @JoergSchuetter @kiwi @BPry @Brandon_Wer...
When user asks for providing full access what categories needed to b allowed & Blocked in URL filtering ?
Hi Team, We came across a situation that our DP had just gone high at a time point till 100%. I checked with the system files and found some crashes have attached the screenshot for your reference. Also all the software status where running which i checked later after the incident.also find the output of show running resource monitor. This was t...
Hello , I need duplicate FW config... What is your suggestion? Should I import the full configuration file or the device state file? What is the difference of upload full configuration file or the device state? Regards
Hey, Guys, one of my customers wants to configure a secondary ISP he change his ISP and Now want to configure the NEW ILL(Internet Leased Line) ISP. to the same interface. I configure the Virtual route, NAT and added new ISP Ip but was not able to UP that Link after I added path monitoring I took ssh and ping source ISP IP to host 8.8.8.8 gettin...
Just setup TACACS authentication using Cisco ISE as our TACACS server. We can successfully login with our AD accounts, but when I look in the TACACS logs on ISE, I see a ton of "INVALID" attempts from external IPs. Is the normal/expected? Is there a way to just limit TACACS to our internal network?
Good Morning.I would like to know if there is a way to migrate whitelists created locally from URL Category to Panorama and that these do not affect the policies already created.Category URLs are many and I would like it to be fast and efficient.Greetings.
Dear Team, I am receiving the below warning while committing, Warning: Collect HIP Data in vsys (vsys1), GlobalProtect Portal (GP) -> Agent -> config (GP_A91) -> HIP Data Collection will not take effect due to no valid GlobalProtect Subscription License The same was working on my old PAN-OS after upgrading to the new PAN-OS(10.0.6) I am...
Dear Team, Need to know how to migrate the Fortigate configuration file to Palo Alto Expedition Tool. Please share if any documentation specific to Fortigate to Palo Alto Migration.
When initiating a software update from Panorama to managed firewalls I get the error“Failed binding local connection end”So I followed the ms.log file and noticed this in the log“2021-02-11 16:12:02.762 +0000 Deployment download using service route: `A<B2>^B”I have a firewall that works fine and this is in the log file.2021-02-11 16:12:02....
Raido_Rattameis
reaper
on:
VPN with two subnets
TomYoung
on:
Device Security license
reaper
on:
No proposal chosen ikev1
