https://applipedia.paloaltonetworks.com/ is not working as of 06/17/2021 3:05 MDT
Hi, Is there any way to block this psiphon app? is it needed ssldecrypt?This app uses many apps (ike,ssh,ssl) so we can not block them. How do you block this app psiphon?
I'm trying to figure out wh my Dns Sinkhole Adoption Rate fell to 77% from 100% over the past six months. Every security policy is using the same anti-spyware policy. Any ideas?
Across a large environment, what would be the best way to audit Palo administrator accounts? That is accounts found at Device > Administrators. For various reasons we all end up with lots of AD accounts, service accounts and so on there, what I'd like to do is find a way to periodically check those accounts against AD to see if they are stil...
Hi Guys, I noticed some strange logs on one of our 5200 firewalls.There is device behind the firewall that is running constant ping to google dns, traffic is allowed and working normally.I noticed a some logs that bytes sent is zero... I can explain bytes received with no reply, but I don't have any explanation why log entry will have bytes sent...
Black PsiphonDear All, Psiphon was blocked for a long time but this week, we detect it has been working again. i have tried to block it again but without any result, it was blocked for 2 hours and working again after that. I have been checking the traffic monitor and found Psiphon used (any category), and used telnet, SSL, https, https, etc to g...
Am trying to create an app id that identifies a particular pattern that only be 10 characters long and must be alphanumeric, had tried various syntax but seems not to be accepted as a correct pattern with the message that the expression is not at least 7 bytes. Anyone whom have such experiences can share the the correct expression syntax? Thank...
Is there a way to split a large output feed into smaller feeds.
I have tested multicast to be working and is configured as in this diagram. In the logs I see traffic from SERVER zone to Multicast zone. But there is no log on INTERNAL client that accessed the multicast stream.
I've been beating my head against the wall over the past week trying to get an instance of Minemeld to work on both Ubuntu Server 16.04 as well as within a Docker container running on Ubuntu Server 20.04 LTS. I've followed the below guides verbatim, and get the same problems with both:16.04 Guide: https://live.paloaltonetworks.com/t5/minemeld-...
Hi All, Has anyone had problems with CAPWAP AP's separated from the WLC by a PA-220 firewall get stuck in a DISCOVERY OperationState? >show capwap client rcbAdminState : ADMIN_ENABLEDOperationState : DISCOVERYName : ***SwVer : 8.5.151.0HwVer : 1.0.0.0MwarApMgrIp : 10.1.1.2MwarName : CISCO-LWAPP-CONTROLLERMwarHwVer : 0.0.0.0Location : ***ApMod...
Hi,we're running into an issue with IPv6 NPTv6 which we use to route traffic through IPS on PA.The address isn't translated as expected.We tried NPTv6 in 2 configurations, both translate the same. We either used:xxxx:xxxx:xxxx:ffe0::/60 -> xxxx:xxxx:xxxx:fff0::/60orxxxx:xxxx:xxxx:ffe3::/64 -> xxxx:xxxx:xxxx:fff3::/64In both cases we sent t...
Hello To All, I will create a short summary about how to do basic checks if the palo alto drops or slows down the traffic. 1. First the pcap capture on the drop stage will show if the firewall drops the traffic and after that we check why the firewall drops the traffic. If the issue is slowness doing a pcap capture in transmit and receive stat...
Hello All, Just wanted to post this in case anyone else ran into it. Microsoft release patches as they normally do, however there is one that might break user-id, June 8, 2021—KB5003671 (Monthly Rollup). There is a warning in the notes: After installing this or later updates, apps accessing event logs on remote devices might be unable to conn...
We have new requirements to require MFA for administrative access to just about everything and have to put into place in very short order. “In addition to remote access, multi-factor authentication is required for the following, including such access provided to 3rd party service providers:1 All internal & remote admin access to directory se...
reaper
on:
Traps For Expired Certificate
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
