Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
We are using OpenSSH v8.2 cannot connect to SSH hosts with SSH Proxy enabled (SSH Decryption).
Testing showing that this is due to the Palo Alto attempting to use RSA with SHA1 which has been removed by OpenSSH in v8.2.
Is there a way we can config
...
Hello team
Since 2 weeks ago we have detected that the temperature for Sensor DP0 Core is high than other members the Paloalto FW
It is normal?
show system environmentals
----Thermal----
Slot Description Alarm Degrees C Min C Max C
S0 Temperature
Greetings!
Am troubleshooting PA authentication using RADIUS. The user is part of the appropriate AD group for the RADIUS configuration and the PA and RADIUS server are both setup for RADIUS auth.
On the PA side, added an administrator and set their
...
GlobalProtect portal page isn't protected by anti-CSRF tokens. Is it possible to add this protection?
We are on PAN-OS 8.0.6 and have GlobalProtect and SAML w/ Okta setup. It has worked fine as far as I can recall.
However when we went to upgrade to 8.0.19 and any later version (after trying that one first), our VPN stopped working.
The client wo
...
I am in the process of setting up LDAPS on an 850. I created an LDAPS server profile and pinted it to our server for credentials. Aftr creating that, I set up an Authentication profile and Authentication sequence (wasnt sure if it was needed but the
...
Hi,
was wondering if someone could tell me if there's a way of changing the hashing method when passwords are saved in Palo Alto. I can see from 2010 the method is MD5 and we are also dealing with an NCR stating the same, but I can't see anywhere thi
...
Hello, I am trying to set up a LACP between a palo alto 3220 ztp firewall and a DELL switch, I have the following problem, it does not set up the LACP.
admin@PA-3220-ZTP> show lacp aggregate-ethernet all
LACP:
**************************************
...
Hello,
Is it possible for the Palo Alto to natively identify, detect, block and/or log the browser user-agent information if the application is "web-browsing"?
Thanks,
-Paul
We would need to map to our incident type an item that comes from our Siem, but when I select the incident type to use and the related instance, it doesn't allow me to map the aforementioned field.
Hi All,
We had VA Scan finding for Palo Alto’s MGMT INTERFACE IP. Please refer to below:
May I know how can this be blocked for Palo Alto’s MGMT INTERFACE?
Hi Team,
We are about to install the VM FW on ESXi host but facing issues while doing it. We have downloaded the base image ova for the version 11.0.1. Is this correct image to install? Or any other image to be used?
PA-VM-ESX-11.0.1.ova
Actually una
...
Hello, I am stuck on "Still working screen"
Logs:
OtakarKlier
on:
RFC1006 protocol over TCP
OtakarKlier
on:
Windows update URLs with IP addresses show up as unknown
OtakarKlier
on:
Panorama Upgrade
OtakarKlier
on:
Layer 3 between 2 buildings
OtakarKlier
on:
URL Category rule works on some firewalls but not others
OtakarKlier
on:
CPE for the Conferences or Summits
