How to remove OInstall.exe from clients pc that Cortex XDR detected and block this process.
Hello community I have a PA-220 firewall with version 8.1.16, the error that is occurring is as follows I have several users in a policy which has url filtering, some users are not shown in the logs of url filtering. When I filter users that are in the url filtering policy, some of them show up in the logs and others do not show anything even th...
Hi All, I working on some firewalls and saw the GlobalProtect IPSec crypto profile but was using aes-128-cbc, I decided to change it to use aes-128-gcm, to take advantages of gcm benefits. Since that change, I have a user who is experiencing issues. They can connect to GP and have no problems accessing internal resources but they are unable to b...
Hi everyone, Yesterday we announced the launch of digital events on LIVEcommunity and introduced our first Ask Me Anything (AMA) event — a Q&A session focused on a specific topic where you can connect with experts! The first AMA event is taking place on April 8 at 10AM PDT, all about professional services and how they can help you in di...
I have pan M-200 with 10.0.4 version.I am getting slow access through chrome as well ss firefox.How can i resolve this issue.
I have everything configured following the documents I found online. I see from the user-id logs the BF is being exchanged with the FW. My users login using pre-win2000 id's. (LNameFI) Verified by monitoring the id's and IP's in User-id app. So now to try testing. Most sites today require a long ID. Usually your email address. I went to a...
Hi All, I have a question about Corporate Credential Submissions functionality, specifically when using Domain Credential Filter. To confirm, does this method use the full AD UPN and password to match? E.g - Let's say my logon name is 'josh.test' and full UPN is '[email protected]'. Would Domain Credential Filter match both of these with a vali...
Hi Community, my customer wants to use Globalprotect for on demand login with a MFA radius server.Everything fine - configured is and it works. Now, we want to use Globalprotect as an internal UserID source.So every GP-Client needs to do Userlogon SSO when connected to internal network (should be completely transparent to the users). But only on...
We have been seeing this over the last few weeks. Here is the sequence of events when the crash takes place. (EDIT) Crash occurred at 13:01:24 , which is after this line: (P6096-T15724)Info ( 374): 03/29/21 13:01:23:463 tunnel to 63.240.97.1 connected This happens only after the computer wakes from modern standby. And it doesn't happen every t...
I use DHCP reservations to ensure the devices on my network get the same IP address every time. I have security and routing policies that depend on known IP addresses. Recently Apple, I’m sure other will follow, enabled a feature that by default that randomly selects a private MAC address when they lease an IP address. I realize that you can dis...
I am trying to setup GP as always-on (pre-logon) when the user is external and not connect while internal. My understanding was that the internal host detection setting was suppose to let the client know that it was internal and not try to connect to the external gateway. That does not seem to work, or most likely I just did not understand the w...
Is anyone that is using GlobalProtect seeing significant performance issues? We are running PAN OS 5.0.10 and GP 1.2.8. We are also doing full tunnel. When I do a speed test from home without GP enabled I get 20 Mbps down and 5 Mbps up. With GP enabled I get 5 Mbps down and 0.25 Mbps down. Now I understand that I should be seeing some impac...
Does anyone know when Minemeld may be able to run on either Ubuntu 18.04 or 20.04? It installs fine on 16.04, but with support for Ubuntu 16.04 ending on April 30, 2021, I would like to install it on one of the later releases will will at least have a couple more years of support and security updates. While it installs on 18.04, and I can get ...
Hi All, GlobalProtect pre-logon is configured. The computers connect pre-logon just fine. However, if this is the first time a user is logging in, or someone else logged in last and they had to change back to their username, GlobalProtect prompts the user for credentials after windows login, even though everything is configured for SSO. If they ...
Hi Everyone, i need your help to better undestand how DNS Sinkhole actually works.I mean, i know how it works, how to configure it, but i'm facing a strange behaviour i cannot understand.In the photo i have uploaded i have an example.Both source and destination are in the same subnet (i have obscured the first two octects for privacy)the destina...
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
reaper
on:
Server monitering -Connection refused
PavelK
on:
Commit Failed
