General Topics

Negate networks within an object group

Hi,

is it possible to negate certain networks within a rule?

example.. src (192.168.0.0/16) and dest (10.0.0.0/8) action Deny

but want to negate dest 10.200.0.0/24 in the same rule so that 192.168.0.0/16 cannot talk to 10.0.0.0/8 but can talk to 10

Panorama IOS required for EVE-NG and RAM requirement

Panorama IOS required for EVE-NG and what is the requirement for RAM. Please help me on this.

Thank You

Help with XML api device configuration

I'm looking for a solution to automate sdwan deployments so I'm trying to do a couple of things with this api call:

1 - create the layer3 subinterface interface

2 - give the subinterface an ip and next hop ip

3 - enable sdwan on the interface and g

Decrypt STARTTLS SMTP protocol but not blocked Virus File

The mail server resides on the network inside PaloAlto.
I am trying to add a feature to use STARTTLS for SMTP/25 from the mail server to the Internet.

I implemented STARTTLS decryption (Forward Proxy) on the PaloAlto and sent an email with Eicar Virus

Block Exchange ECP externally

Hello team,

We are experiencing with our hosted exchange server on the cloud. Despite efforts from our Server team to block ECP access from external networks, it remains accessible. The team has suggested blocking ECP for external networks only.

I

Palo Alto vm image provided by Palo will not start properly on eve-ng, version 10.2.5

Looks like its a known issue and from what ive seen from posts online going into "maint" mode and reinstalling fixes it, the problem is no mater how fast i am its literally IMPOSSIBLE for me to get into maintenance mode as it goes past that bootup pa

GP issues after a fail over test

So we have an annual BCP fail over test, during the fail over test when we shut the primary TOKYO PA 850 it fails over to PA 850 SEC, however when we connect to the VPN we cannot on our TOKYO we are not able to connect. 

I'm a bit newbie on PA and

RJ-45 10GB interface and cat7 cable

Hi All,

Anyone deployed a ngfw (pa-3430) using the 10gb ports with a cat7 copper cable yet? same process as normal cat5/6 connection no additional changes needed?

have a deployment for a client with fiber sfp but they did not purchase the sfp modul

rustdesk for remote support

Hello Friends,

                    I have a question considering your valuable openinion regarding remote support applications.

For financial issues I am moving to use an Open source "RustDesk" for remote supprt in my company.

I can see that the appl

issue about sdwan bgp routing

HI , Bro

I setup a hub-spoke sdwan on my pnet lab

Hub  can learn site1 and site2 internal routing , but it can not pass  these  routing entry  between  site1 and site2.
which cause hub and spoke(site1 and site2) can access  each other  ,   but the spok