how can we activate VM license for practice ..
The ipsec-tunnel comes up only when there is interesting traffic destined to the tunnel or when the tunnel manually initiated.That leads to problems in our monitoring. I'd like to ask if there is a workaround to make the VPN always-up without need to enable tunnel monitoring. Because tunnel-monitoring must verify connectivity to an IP address fr...
Hi all, I Use Global Protect version 4.13 on a PA 820 Os 10.0, after updating my Mac to Big Sur i vant connect to the Palo anymore.The strange thing: when i use the same Mac to connect to another Palo in our domein it works.The error: failed to get client configuration. The GP works with other device on my account so i know for sure the connect...
Can we create a profile in the Palo Alto firewall to link up with an AD account and limit bandwidth to each user?
Hi everyone, If you haven’t already seen, registration is now open for our first interactive event all about the Best Practice Assessment (BPA) tool! You will be able to connect with subject matter experts, share best practices, and learn how this tool can improve your security posture. Register here. I’m registered and can’t wait to see ...
Hello, We have a pair of 5250 running PANOS 8.1 with 125 vsys. We want to deploy EDL to block well known attackers. My understand is the EDL has a limit of 150000 entries for IP list. If I create a shared EDL (type IP list) with 10 entieres and create 2 panorama shared security rules for inbound and outbound for all 125 vsys. Is that count as...
Hi All, I have a user who connects via a thin client with GP to our network. Actually we have around 50 users, but this one user has many problems. She gets disconnected multiple times a day. She tried multiple connections: her current residence with both wifi and cable, at her parents, both cable and wifi (2 different cities), and mobile data f...
Anyone know what is latest OS should be install on PA-3020?
Currently, we can download the PAN-OS Software Image of the PA-200, 800 and 3200 series from CSP.Does it work even if I install different models of PAN-OS? For example, the case of upgrading by installing PAN-OS 7.0.1 downloaded from PA-200 to PA-3050 with PAN-OS 6.1 installed. please answer about my question. Thank you.
Hello,I have PaloAlto on GNS3 i set a policy from inside to outside and i also do the NAT policy Plus the virtual router configuration.from inside i can ping to internet but i cannot browse, is that related to licence or i miss something?Thanks.
I'm having an issue where my Decryption policy is breaking my Palo Alto Dynamic Updates. When I turn on decryption, and then attempt to download an Antivirus, Applications and Threats, or Wildfire update, I'm given the message "Invalid content image, Failed to download file". When I turn decryption off, the updates work perfectly. This seems...
Hello, How to configure the PA firewall to return a SMTP 541 when vulnerability is seen in a SMTP flow ? I have managed to do it with the AV protection but not with the vulnerability protection. Cedric
Global Protect, running 5.0.8 w/ Mac 10.8.5.Client connects and works fine initially.At intermittent times, a few times a day, the client has to manually Resubmit Host Profile for the HIP rules to re-engage and restore traffic flow.This is obviously a problem as the user doesn't realize this is happening until their traffic fails.This is happeni...
Good afternoon, we've noticed a strange issue on a client firewall that injests URL IoCs from our Minemeld instance into an outbound block policy. Specifically it seems that the Firewall Minemeld Policy is blocking outgoing URLs connections that are not actually present inside the Minemeld URL output feed. We're investigating the issue as it see...
Hi, We have GP configured with 0.0.0.0/0 inside tunnel. We would like to split-tunneling for microsoft updates. In the split tunneling profile we add several microsoft URLs in order to avoid but its not working.We added this URLS:*.update.microsoft.comdownload.microsoft.com But in data filtering we can see the updates being downloaded using PA. ...
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
| User | Likes Count |
|---|---|
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
