Do you know of a CLI command or a rest API call to push and to show the changes of configuration to be pushed to a firewall from Panorama? I am trying to automate the process, but could not find any references.
I'm getting the following start error message on Windows Server 2019 running ID-Agent. The MADebug file shows the following as well.------------MDM Service is being started------------11/10/20 15:52:06:552[ Info 1414]: Os version is 6.2.0.11/10/20 15:52:06:552[ Info 480]: Load debug log level Info.11/10/20 15:52:06:552[ Info 483]: Product vers...
I'm switching to route path monitoring for VPN backup failover and would like to keep my tunnel monitoring active for down/up tunnel email notifications. I can set the tunnel monitoring to wait to recover. Can I use both of these at the same time and work as intended? Thank you.
We have separate zone protection profiles for each zone. And the definition of aggregate says that "all thresholds apply to the entire group of devices specified in a DoS Protection policy rule". So if we are trying to protect servers in DMZ, unless we use smaller groups (for which our environment doesn't seem to have a usecase). Do we even need...
Hi Guys,Devices:1. Panorama Version 10.0.1 Model VMware ESXi2. Palo Alto Cluster Active/Passive Version: 10.0.1 Model: VMware ESXi VM License: VM-100 Problem:Logs that send from Palo alto to panorama cant be seen under the monitor Traffic tab and cant be sent to the Syslog server.directly from the Palo alto, we can see the logs under monitor tab...
Hello! Does anybody know how to temporary disabel a miner without deleting it from config ? Problem is, that currently www.malwaredomainlist.com gets resolved to 127.0.0.1 and the miner alerts in the log files with basepoller._poll ERROR: Exception in polling loop for Malwaredomain_IPs: HTTPSConnectionPool(host=www.malwaredomainlist.com, por...
Hi Team, I import the configurations from managed device to panorama then export to managed devices of our A/P firewalls. everything went well. but when I see the summary on panorama passive device template showing as in sync but active device template disappear. PFA below for your reference,
Ok, so this may be a stupid question, but I have a server that has a web service running under a domain\webservice account. I want to define a security policy for the service, but the firewall does not consistently get the correct user. After a reboot the user is right, but if I sign on to the box the user becomes me instead. I have tried the...
Hi Team, I have configure the Pre-Logon but it's not working (T5208) 10/26/20 14:04:11:874 Debug(9110): SSO password is empty(T5208) 10/26/20 14:04:11:874 Debug(2462): m_preUsername pre-logon(T5208) 10/26/20 14:04:11:874 Debug(9070): Password is empty.(T5208) 10/26/20 14:04:11:874 Debug(2483): CheckCachedPortalForPrelogon 0, PrelogonNeedTimeout...
Hi Team, I am facing an intermittent issue as follows.- I have a policy based on the username in domain\username format (Domain in NetBIOS name).I can see sometimes user traffic is not hitting this policy, but the traffic log shows with the correct username (domain\username - hope this eliminates the chance of domain normalization issue).-As the...
Recently enabled split tunneling for our Global protect VPN, and have added some domains into the split tunnel. For some users domain split tunneling doesn't work. The domains configured to be included in the split tunnel are as follows *autologon.microsoftazuread-sso.com*enterpriseregistration.windows.net*.microsoftonline.com We are trying to a...
Hi, I am about upgrade some PaloAlto firewalls with 10s of Vsys but wondering what would be a good report to generate to identify traffic flows for pre and post checks as well as identifying impact to services. any help will be appreciated. Regards,
HiI'm doing a global protection test.And we created the External Gateway and the Internal Gateway.And for the Internal Gateway, we didn't set up the Tunnel.If so, wouldn't it count to the Globalprotect Max tunnel provided by the equipment?In case of External Gateway, I think it will be applied to the count because it uses Tunnel.However, I don't...
Site 2 site allows only two networks to be pulled inside the tunnel (one of them behind the mikrotik and the other one behind the palo alto).I’ve tried different settings and it doesn't help.Has anyone had experience building a tunnel between them based on GRE tunnel over IPsec?Several subnetworks need to be passed through the tunnel.
Hi, Panorama can reach out internet but when checking the updates we are getting a message says "Error while trying to read upgrade info. Please try again later". I did follow https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkuCAC , and it seems everything is fine on panorama. Is there anything else I need to verify? ...
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
reaper
on:
Server monitering -Connection refused
