Hi, Currently, an object which has been configured for 130+ policies. What's the best way to remove it. Easy for object groups but how can to deal with this kind of situation with an easy solution? Thank you.
Just in case you missed it, our very own Cheryl Rasmussen took some time to interview one of our new Cyber Elite Members, Brandon Wertz. Take a second to visit Cheryl's blog about this and check out the video here: https://live.paloaltonetworks.com/t5/blogs/spotlight-interview-with-brandon-wertz/bc-p/356557#M1597
Info: On Saturday, November 7, from 11:00 a.m. to 11:00 p.m. PST, we will perform maintenance on our Customer Support Portal (CSP) and supporting systems. During this time, the CSP site and features will be unavailable. Please plan accordingly. The affected features include: Case Management and Case Creation Asset Management: Product Registrat...
Good afternoon I have a Fw HA and these firewalls share the same IP. What I configure is that Nat changes the port to access the management.The problem I present is that when I try to enter firewall B by gui and I want to make comparisons with fw A, the GUI session of firewall A automatically closes.I know that the problem is for having the same...
In Monitoring/Traffic I can see individual conversations. I wondered if there is any means to get summarization out of the PAN. For example, show me all the destinations IPs in the 10.100.100.0/24 network which received traffic in such and such time frame. Is this possible within the PAN GUI? Or would you need to export and work in say excel?
Global Protect Connecting get the following error Gateway <name> The server certificate is invalid.
Hey, all. We have some sites with guest networks as well as internal networks. These come from zones named respective to what they are (e.g. guest, wireless, etc...). We want to have response pages setup so that people know why they are being blocked, and in this response page it gives a link to our SOC in the event that this page needs to be un...
We're having trouble getting traffic from multiple ISPs to a single internal server working on anything except the ISP that matches our default route. We need to be able to do this because we are trying to migrate from the ISP networks to the /24 we acquired from ARIN. Due to the nature of the business, we have thousands of devices in the field ...
hi,i have a problem with an Site2Site VPN connection. i need an option to get access from external to my internal network but we have the same subnet so i need access to 192.168.1.xxx but from the outside (Tunnel) i will use the ip 192.168.5.xxx how i have to configure this?i hope somebody has an idea for thisthanksStefan
Hi folks- My customer is running v10.0.1. In Setting up User-ID, we cannot locate the "user-id-agent" tab. Nor is it an option in the CLI . I could create a user-id-agent on my v9 lab box, but not on V10… Im guessing a v10 bug ??? I have a case open... any ideas ?
Hello!I setup IPsec tunnel between palo alto and mikrotik.I found an example here.I did everything step by step 1-13(see below)I have PAlo alto version 9.1.3-h and Router os ver. 6.43.13. phase 2 doesn’t work. How to befriend these devices? Help me. Config PALO Alto1.Create a new interface and add address (gateway default for tunnel in Virtual ...
I have a S-to-S vpn tunnel to a remote location (terminating on cisco router) which was passing just the Intranet traffic. But, I would like to pass the site's Internet bound traffic through the VPN tunnel and subject it to Palo's threat inspection policies.How can I do this? Thanks.
Hi, cisco campus lan design ( access distribution core )In data center we are using cisco vpc (spine and leaf ) Now I want to place an (acive standby fw ) in data center . I place the Please guide me to do so , Where should I Place the firewallThanks
Hi all, I have a eve-ng laptop that i'm planning to use for practice. I have installed the KVM file and activated it as well as added it to the eve-ng lab. However, when i start the device. I get the error message "No bootable Device". This device is currently configured to use PA8.0.5 in the EVE-NG environment. I have Attached a screenshot of ...
I have a Palo Alto (PA-5220) HA pair with software running (SW: 9.0.9-h1, Global-protect version: 5.1.3). I found below vulnerabilities are affecting the current PAN OS. I am planning to upgrade it. Could you please suggest the best recommended software with Global protect version for my firewall. Model: PA-5220Software Version: SW: 9.0.9-h1, g...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
