General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

Resolved! ZPA Minemeld feed from json source truncated to last record

Problem Summary:

Trying to locally convey - as a feed - all subnet block ranges from https://ips.zscaler.net/zpa/json - but only getting the last presented.

URL Being referenced: https://ips.zscaler.net/zpa/json

Example Content:

{"Cloud Name":"zscale

...

Resolved! "SMB: User Password Brute Force Attempt detected" on share that is not being accessed

Recently I accessed a SMB share on a corporate Synology device (through the PA firewall). Accessing this share is hardly ever used. Now...days later, after several reboots of the client computer, the Firewall keeps on detecting the "vulnerability" SM

...

SSO authentication was solved through override, cause analysis request and Similars

Hi.

I have a website that I access via sso authentication, but I can't connect through the firewall.

After trying various things, I solved it through the override rule in the firewall

The override policy cannot be removed at this time.

I wonder why t

...

Resolved! Enable Qos on sub-interface

Hi all,

Can I configure Qos on sub-interface?

Model PA-5260

Software: 8.1.11

Thanks

Resolved! Captive Portal LDAP Authentication redundancy

Hello.

I have a Captive Portal that uses next Authentication Profile:

CP_Auth

Where:

Authentication Sequence:

CP_Auth - Auth_Mode_1, Auth_Mode_2

Authentication Profile:

Auth_Mode_1 - LDAP_1
Auth_Mode_2 - LDAP_2

LDAP Server Profile:

LDAP_1: 10.10.1.101, 10.10.

...

Resolved! Panorama IPsec tunnel to AWS

Need to create IPSec tunnel in Panorama hosted in Google Cloud that is managing our PAN-850 in customer datacenter to our cloud environment in AWS. FYI-we dont have Palo Alto in AWS.

Access with ldap or kerberos to minemeld

Hi all,

It's possible to configure ldap or kerberos server on minemeld?

thanks.

Resolved! unsigned LDAP

Hi,

As we know Microsoft is going to disable use of unsigned LDAP port 389 in March 2020.

Fortunately I don't have LDAP profile on my PA firewall but I have Kerberos. Will there be any impact ? and do I have to change it ?

Thank you

Konrad

Resolved! CLI command for IPSEC tunnel info

Hello friends,

I am looking for cli command to see all the details related to ipsec tunnels configured on the gateway. I need information related to tunnel id, peer ip and their status. Is there any command available ? I can see details under gui but

...

SSL test pages of urlfiltering.paloaltonetworks.com not blocked

Hi,

If we test https://urlfiltering.paloaltonetworks.com/test-grayware there is no block page however if we test http://urlfiltering.paloaltonetworks.com/test-grayware we do get a block page.

I cannot find urlfiltering.paloaltonetworks.com nor *.paloa

...

Route between Subinterfaces with two VRs

Hello,

I have a network with two WAN connections, i have assigned one of them for a vlan 10 and the other for vlan 20 using two VR and NATing also i created dhcp server for both vlan and for now every thing works fine, the problem is i can't access t

...

How to remove one BGP-RIB Out

Hi,

We've configured BGP between Paloalto to Azure by using EBGP. The bgp is established but in RIB Out noticed that prefix 0.0.0.0/0 advertised to the peer respective azure.

How to remove this, because due to this the users in bgp unable to access

...

RADIUS Authentication Still Prompts for Password Change

I have a stand-alone system which is utilizing two Palo Alto 220 Firewalls. As part of this system, I have RADIUS policies configured on a Windows server to provide domain-admin access to the device. On one PA220 I am able to login with my domain cre

...

TAP Mode

Hi,

I want to know if there is a way to forward all switch traffic to single Destination port of Palo alto. So far I can find on switch side you can make a singel port source and destination the PA port. Just want to know if we can monitor all ports

...

Shared Gateway and Panorama

Hello Community,

I have Panorama that managed cluster of PA-5000 with some Virtual System, I use one Device Group for one VSYS.

Now I need to configure the Shared Gateway.

It seems that i can manage the NAT Policy related to the Shared Group only into W

...

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

How and Why to Accept a Solution to Your Post

Resolved! ZPA Minemeld feed from json source truncated to last record

Resolved! "SMB: User Password Brute Force Attempt detected" on share that is not being accessed