When user asks for providing full access what categories needed to b allowed & Blocked in URL filtering ?
Hi Team, We came across a situation that our DP had just gone high at a time point till 100%. I checked with the system files and found some crashes have attached the screenshot for your reference. Also all the software status where running which i checked later after the incident.also find the output of show running resource monitor. This was t...
Hello , I need duplicate FW config... What is your suggestion? Should I import the full configuration file or the device state file? What is the difference of upload full configuration file or the device state? Regards
Hey, Guys, one of my customers wants to configure a secondary ISP he change his ISP and Now want to configure the NEW ILL(Internet Leased Line) ISP. to the same interface. I configure the Virtual route, NAT and added new ISP Ip but was not able to UP that Link after I added path monitoring I took ssh and ping source ISP IP to host 8.8.8.8 gettin...
Just setup TACACS authentication using Cisco ISE as our TACACS server. We can successfully login with our AD accounts, but when I look in the TACACS logs on ISE, I see a ton of "INVALID" attempts from external IPs. Is the normal/expected? Is there a way to just limit TACACS to our internal network?
Good Morning.I would like to know if there is a way to migrate whitelists created locally from URL Category to Panorama and that these do not affect the policies already created.Category URLs are many and I would like it to be fast and efficient.Greetings.
Dear Team, I am receiving the below warning while committing, Warning: Collect HIP Data in vsys (vsys1), GlobalProtect Portal (GP) -> Agent -> config (GP_A91) -> HIP Data Collection will not take effect due to no valid GlobalProtect Subscription License The same was working on my old PAN-OS after upgrading to the new PAN-OS(10.0.6) I am...
Dear Team, Need to know how to migrate the Fortigate configuration file to Palo Alto Expedition Tool. Please share if any documentation specific to Fortigate to Palo Alto Migration.
When initiating a software update from Panorama to managed firewalls I get the error“Failed binding local connection end”So I followed the ms.log file and noticed this in the log“2021-02-11 16:12:02.762 +0000 Deployment download using service route: `A<B2>^B”I have a firewall that works fine and this is in the log file.2021-02-11 16:12:02....
I intend to purchase two new PA-220s in my company and want to set them up in a high available configuration in case one dies. Is there a license that's required? Sorry.. very new to PA and just trying to learn.
I have a PA 3220 with two static routes, the two routes have different AD, Path monitoring has been configured in first static route with premtion enabled, my query is that can we generate email alert for the primary route down and secondary route down given that no Path monitoring has been configured for the second route in PA.
I have LinuxA (redhat 6.10) and LinuxB (CentOS 7.9) sitting in ZoneA accessing LinuxC (Ubuntu 20.x) sitting in ZoneB on http port without any NAT, jut routing and we have firewall rule to allow tcp port 80 (application ANY) for LinuxA and LinuB to communicate with LinuxC on tcp port 80. The PAN firewall is PA-5250 running PANOS 9.1.10 From Linu...
Hello, We are in the initial stages of setting up zone protection renaissance, and still playing with threshold and event values (currently set to 30sec, 5event). I am also set to block the IP, for a small amount time, as we continue to adjust and become more stringent. I noticed within the Traffic Log the following: From Traffic Log As you ca...
Earlier I posted and asked if there were any technical considerations for renaming a DG. I decided to rename two of them and validate on Panorama to see if it through any errors, it didn't, but I reverted anyway because I hadn't put in a change notification. When I reverted back I thought everything was fine and I guess it is except for Panora...
Hi Community, This is my first message and hope I am in the right place. I am tasked with taking our single internet connection (4Gbps) and carve in two lanes. One lane will service normal traffic; internet, vpn, remote access, telephony, etc. The second lane would be dedicated to send backups data to the cloud. I'd like to take a 75/25 approa...
Raido_Rattameis
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
