Do you make use of the EDLs available here? If you do you may have noticed they've disappeared, Google says the page doesn't exist. You may want to look for alternatives if you're using these lists. Jason
Hello, I'm trying to route all GUEST traffic on a PA firewall to ISP-2. I understand you can use PBF on the PA firewall to route based on source address. I don't have a lot of experience with PBF and have encountered a few issues when trying to implement this. Some questions I have1). Do I need a 2nd VR to do this? 2). Do I need 2 new security ...
Hello, We implemented the blocking policy for the custom URL categories however now once committed we receive commit warning like the following: Application 'dropbox-base' requires 'web-browsing' be allowed, but 'web-browsing' is denied in Rule 'outbound-advertisement-block'Application 'google-drive-web' requires 'google-base' be allowed, but 'g...
Hello, After applying Import filters in BGP the Local RIB is reduced to a filtered set of routes advertised by peers. However it seems to be impossible to see what the original set of advertised routes is. The peers are still advertising these routes, but there seem to be no methods in the GUI or CLI (show routing, debug routing ...) to see thos...
Hi All, Looked at my nodes today and it looks like https://panwdbl.appspot.com is down or decommissioned. Tried going to this URL and I get a 404 error? Has this page moved and I missed a notification, down for good or just an outage? Obviously impacts some of the DBLs I have. Regards Adrian
We have two 3260 FW in HA pair and using DNS proxy for the GP VPN user's (average 500 users/daily).Palo alto's top applications are DNS and Ping (total 70% in terms of session count), Is anything wrong ?
Hi community, I want to setup new panorama VM to replace old panorama M-100 and accept new devices.I have deployed a vm on ESX with one disk of 81Gb and second disk of 2Tb.Panorama running version 8.1.13,you can see partial output of show system info to understand system mode and ressources allowed to VM.**********system-mode is panoramaoperatio...
Dear Team, Below is the warning message for Mac User after upgrading to Latest Mac OS Big Sur version 11.0 beta . It says it will be incompatible with the future version of MAC OS. Global protect version : 5.1.6
I have accidentally upgraded to Mac OS Big Sur, since then Global Protect app is not able to connect to VPN. Should I expect Global Protect to work on Big Sur already? Or is it on the way? Thanks
We currently have this setup in our datacenter. The Meraki HA pair is the VPN endpoint for our 120+ remote sites. In a DR situation the datacenter has IP mobility, where our current static IPs will failover. This setup uses BGP through the Palo. With BGP enabled on the Palo HA Pair and datacenter’s internet the Meraki HA pair is inaccessible, wh...
Hi.Can i allow videos from specific youtube channel and block others. Example I want to allowing all videos on Cisco channel (https://www.youtube.com/user/Cisco) and block all resource.
Hi Peeps,I got technical query regarding how to change SSH v1 to SSH v2 in PA firewall, Because one of our customer got an alert from VAPT tool like as follows,. Description :- KPMG test team observed that the Secure Shell protocol version 1 support was enabled on the tested devices.Secure Shell is typically used as a cryptographically secure ...
I've configured a data filtering profile and have been testing sending the data filtering detections to syslog, then to Sumologic. From what I've read, these detections are Threat Type, Data subtype in the logs. I have a log forwarding profile created to send all Threat logs regardless of severity or app to syslog and can see types like vulnerab...
Hi all.I wonder PA can log a IP and mac address of spoof attack such as ip spoof, arp spoof, dns query spoofing attack.Sometimes, customer want to know above information from PA.I think PA only drop a wrong packets. isn't it?Thanks.Regards.Roh.
We are starting to see valid websites showing up as malicious due to them being hacked or for some other reason. Once the site is cleaned up however, is it up to someone in the Palo Alto community to request a URL Category change manually, or is there an automated process that checks the website to see if it is still malicious? or another way to...
