I have an HA pair of firewalls on 8.1. Do I need to upgrade both to 9.0 and then 9.1 or can I upgrade one all the way to 9.1 and then the second from 8.1. to 9.1?
Hi there, i am currently working on a grafana dashboard to monitor a pa-3xxx cluster. getting numerical values by snmp with collectd is no problem. and it ist great for displaying the data. collectd can't handle strings, but the ha state ist totally string-based. does anybody know a way to get the snmp output parsed an sent into graphite? is the...
Hi, I have configured a RADIUS profile to use a "Directory as a service" provider (JumpCloud) for authentication, I have tested this with LDAP and everything seems to work as intended but when I configure the Radius profiles and test authentication via the cli I get the following responseFailed EAPOL auth (-1). Response for user: "bob" from RADI...
I have a repeatable issue with Expedition. I have an ASA with 3 contexts, no matter how i import them, export refuses to pull out tags cat /etc/tmp shows: Notice: Undefined offset: 0 in /var/www/html/libs/common/xml/panosxml.php on line 1752Fatal error: Uncaught Error: Call to a member function addChild() on null in /var/www/html/libs/common/xml...
I use two PA820s for ipsec vpn and used certificate-Based Authentication for IKEThe 820-A version is 8.1.6 and the 820-B version is 9.1.4.820-A configuration ike gateway no problem。820-B will report an error when configuring ike gateway ，authentication cannot have more than one subconfiguration,I attach a screenshot for reference.Do anybody ha...
Hi All, We've 'abc.com' as primary URL which should be accessed by all. sub URL - 'abc.com/odata' should be allowed to access only to specific Public IP which we mention. Please suggest how we can apply these policy in PaloAlto. Thanks,Sathish
Hello, I have to reconfigure management IPs on PAN-OS 8.1.x firewalls, which is managed also by a Panorama 8.1.x server. My thinking re process is as follows: Add new policy to allow Panorama to new Mgt IP on applicable firewalls and vice versa.Reconfigure management IPs on firewalls (locally)Reconfigure Panorama device groups etc with new manag...
Hi Team, We have few firewalls (5520,5260, 3220 and 3260) managed by Panorama. I wanted to check the health status of those firewall. I found some of them are in Deviating Devices list due to the memory / CPU consumption. For example, in some devices the memory is 18% and it is in Deviating Devices list. Some devices memory utilization is 22 %, ...
Hi, Please help to resolve the following vulnerabilityVulnerabilities :1. HTTP DELETE Method Enabled (http-delete-method-enabled)2. HTTP OPTIONS Method Enabled (http-options-method-enabled)3. TLS/SSL Server Supports The Use of Static Key Ciphers (ssl-static-key-ciphers)Thanks in advance
Hi team,Does anybody know if there is any compatibility issue between Palo Alto and Aruba Clearpass for changing users' passwords?When we use Microsoft NPS, GlobalProtect users will be prompted for changing their passwords when the passwords are expired. However, when we use Aruba Clearpass instead of Microsoft NPS it doesn't work. The only work...
Hello all,What is the best way to block microsoft updates on the PA ?I have seen the url filtering suggestion but was wondering could we just drop via ms-update app ?https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClbvCAC TksDermot
Hello Folks, I've had MineMeld running successfully since August of 2018 with a number of nodes all working flawlessly until recently. One miner in particular is exhibiting an error after a drawn out polling session. Eventually, the miner goes into an error state and when hovered I receive the folowing: It's odd because this miner is still ...
I am new in Palo alto I would need to block the file with it's classification data, in attached screen shot there is AdNew file and its classification on properties section is "Deepika_Classification" Label is there I need to block as per it's label. We are sending a classification name from the api but we need to search file if file contains i...
Hey everyone! So one of customers recently migrated to PAN-OS 10.0. They have a couple of firewalls, a M200 as a log collector and a Panorama appliance. The ACC initially doesn't show any data, which it did with previous releases. We must switch in a drop down menu and select the DataSource: Remote Data Device, which apparently loads data from t...
Running GNS3 on VMWare Workstation setup.I have PA-VM installed running v8.1.10 code.Everything runs well but seeing that my interfaces are running at 10G (by default) and I can't change that.In Network-Interfaces-Ethernet-Advanced - "Link Setting" - Link-Speed and Link-Duplex are "grayed" out and set to AUTO.Using CLI my only option is "auto".T...
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
