Hi All, I have a question, I have a pa-200 setup in my home lab and would like to block certain sites using Local Users in my Security Policies. What is the best way to achieve this?
Are there any recommended settings for excluding categories, such as disk-backup or firewall? And if there is one there, but no vendor is listed what will it default to? For example, if under Portal > Hip Data Collection > Exclude Categories patch-management is listed under Category, but there is nothing listed under Vendor, what does that...
In last week's blog, we touched on the coffee table chats that will be taking place. Today we announced the specific times as we we want to make sure you start putting them on your calendars for next week! Whether you have 10 minutes, an hour, or more, join any of these coffee table chats and connect with the LIVEcommunity team by asking quest...
Hello, We are facing the following issue with the GlobalProtect client: (client version 5.0.5-28) When the user downloads the client and logs in for the first time, the user is connected successfully. However, when the user disconnects and connects again, the client takes a long time and then displays this error message: "Connection Failed: Coul...
Is anyone else having problems opening a new support case via supportcases.paloaltonetworks.com? Whenever I try to open a new case I am able to complete step 1 just fine however when I get to the section of selecting the asset effected there are no tick boxes next to any of the assets. The filtering drop downs on the columns also appear to be ...
Hello , We have a customer B who was earlier supported by a Company X Now customer renewed all the Licenses -Threat Prevention , GP , URL filtering etc through our company Y ( We are PA Partner) and also the Support contract with us ;As per customer Company X is/will be supporting them Break and Fix contract . So can i add the serial numbers ...
Hi , I have a customer who has Threat prevention , AV, Wildfire ,licesne The Network is divided into various Security Zones - like Users , Printers, Voip , Front end servers , Backend Servers , there are around 15 zones Now we have the BPA report and a lot in terms of APP ID and Service needs to be fixed Customer wants a kind of matrix as a Indu...
Allowed all http and https traffic to Untrust, still the traffic on port 80 is getting blocked. Any idea why it is So? Rule allowing http and https traffic Traffic log
Hi, I have installed a couple of PA-vm firewalls but i am not able to test upgrading PAN-OS or enable multi Vsys support.Am I using the wrong model in the lab? Is there a way I can do the above? Are there any trial licenses without limitations? I look forward to hearing from you. Kind regards,
Dear community, I configured schedule on policies and it seems that as per design the existing sessions are not affected by the schedule:https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/objects/objects-schedules.html Meaning that if a session was created before the schedule, the traffic will not hit the scheduled policy un...
HELLO EVERYB, i there any way to increase de limit of servies? in our case er arrive to 2000 service (ports) in PA 5020 WITH IOS 8.1.10? have i to increase at the hardware level? or sfoftware? thank u so much
Dears,As a cleanup to our policies in the firewall, I added a tag "Zero hit" to the policies that never trigger a hit. I have a huge number and I would like to move them all to the bottom.I tried to find a way to move them to the location I want and found it not available.My question:1- Is there a way to (not manually) select a big number of pol...
Hello, There is no interface show when i try to change the source interface for specific service (as show as in image).The VM-300 box is on AWS, and both Internal and External interface are set to use DHCP, Layer 3 routing. Anyone has idea how to correct it?Thank you.
Is there a proper way to request a CVE be mitigated by the Palo firewall and added to the Threat Vault? I have read the conditions for a signature being added, but it doesn't tell you where to request one. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAOnCAO If it matters, I'm trying to mitigate Oracle WebLogic Ser...
The following guide provides the parsing for CEF-style Log Formats for PAN-OS 9.1:https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/cef/pan-os-91-cef-configuration-guide.pdf We have been using this for a while, but because now we have a 2nd source of logs (PRISMA) aside from Panorama, we just found out the parsing suggested for "T...
