Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
Hi,
I configure my device to virtualwire mode with sfp baseT transceiver but it wan't to work (they are red in GUI).
When I change to Layer3 mode everything work corectly (change to green).
In CLI I can see transceiver.
Have you got similar problem or an
...
Are the native or third party tools that users are using to generate custom reports beyond what the native custom reports can do?
Hi,
I have question for access routes. We have configured global protect and advertised only one access route however after connecting to global protect VPN, we can see multiple access routes in client machine. Is there any other criteria for access r
...
I have 15 proxy-ids in the vpn tunnel whose peer is checkpoint firewall. Just one out of 15 usually remains really busy and lot of traffic get encap/decap on it. Remote users accessing resources within other 14 proxy-ids have absolutely no issues bu
...
hi,
I am preparing a new environment (my plan is for 2x management only + 2x log collector only) and have no experience with dedicated lot collectors yet. Please help me to clarify few things:
- log collector for sure needs licenses, are they the same
For the last few days, we have been trying to import firewalls into Panorama and have not been successful at it.
Panorama firmware is 9.0.7
Palo Alto firmware: 8.1.13
Description of issue: During the importing process, I was able to extract the config
...
We've implemented Okta SAML SSO with our layer-3 Captive Portal redirect page for IP-User mapping. The solution works, but users are landing on a "User Authenticated" web page, rather than the website they originally browsed to. Users now have to re-
...
Does PAN OS has a feature to calculate session age for any active session ? In particular looking from SOC point of view if they want to monitor long time period active sessions used by attackers to compromise security.
I am not looking for session
...
Hi,
Which one is best split tunnel or tunnel all , If tunnel all how to do in PA .
What are the pros and cons
Thanks
hi
this is jo. from S.Korea
case(PA-3060 / PAN-OS 8.0.7)
customer want to check
'file system integrity check' when it occur.(monitor->system log)
when the integrity log occur want to send to Syslogserver.
test.
I`d reboot Pa-220 and checked system log how
So PAN doesn't log HTTP response code, at least I do not seem to find one under URL Filtering logs, and if it doesn't, then how Palo could claim that it is the replacement of proxy?
Hi,
>We are creating a shared obj and shared group in panorama and committing to only one specific device group at the end.
>will it cause any trouble later in future while doing commit all ?
>Is it okay to do like that or will we face any difficulties
...
I'm trying to setup PaloAlto response pages to submit content using "button" to Service-Now. It seems that in order for content of response page to be 'sent' to Service-Now, javascript and ajax must both be used in the html response page. My questi
...
reaper
on:
HSBI and HA
reaper
on:
Agentless User-Id integration
reaper
on:
Required PAN-OS 8.1.25-h1 for PA 3060
