I need to configure MFA for administrator login, we would prefer second authentication through e-mail or any mobile APP token.I am unable to find exact document to configure , could you please help us to configure MFA in our Paloalto device.
When i import my HA pair of firewalls into Panorama (9.1.3), the resulting template includes values for HA config. I would like to leave HA config up to the gateways themselves and not include it as part of the template. How would i delete that part of the template? If i set values to their defaults, that part of the config still exists in the ...
Our pki team has setup a scep/ndes server for us to use for new firewall we setup. The error i get in the gui is not saying anything. If I would like to start a debug on the firewall cli for scep. Where do i do that?
Since i can see the stable version mentioned for panorama is 9.1.4,but when i go to support portal under panorama base images to download 9.1.4 i cannot the file...i am looking to install it on vm/esxi. Let me know the stable version from 9.1.x and 9.0.y family according i will install and also chose image for my firewall also
We are currently looking at updating our global protect client and would like to get some guidance on what version we should be updating to, ideally a client that may support MacOS Big Sur when it is formally released. With the global protect client is the latest and greatest considered stable for production or is there a preferred release? We a...
Hi,We have observed that “activating” a GP client version is not captured under configuration logs. Is this because no commit is required for such an action? Is this expected behaviour? How can we check on the history of such a configuration change? Are the other actions that will also not be captured in configuration lo...
Hi Folks,We currently have a primary direct internet from the ISP to the Palo Alto PA-200 configured with LSVPN .As we plan to have a secondary Internet, we want to connect the Palo Alto PA-200 with 4G Router using LSVPN as well. The problem is the public IP address is assigned to the 4G router and we'll connect it via LAN With PA-200 as the dia...
We're still experiencing the occasional OSPF adjacency drop, although it's much improved since our changes over the summer. However, the log entries in the System log is anything but useful: OSPF adjacency with neighbor has gone down. interface ae2.211, neighbor router ID 10.200.11.96, neighbor IP address 10.200.11.96.Is there any way to get mor...
At random times all TCP connections from the Internet are blocked (all ports and all IPs) for incoming traffic only. Websites, mail servers etc are not accessible from the Internet. UDP and ICMP are not affected. What could be causing this?
We're provisioning and testing a dedicate wave circuit and an Internet-IPSEC backup between two PANs. (We are also running IPSEC over the wave circuit). We noticed a phenomena of sorts and was wondering if anyone has experienced this: We purposely failed the upstream PAN's WAVE circuit's ethernet interface to test failover to the internet-IPSEC....
Hi everyone , is there any way to Redirect one URL category to another domain . For example all news to CNN.com
Hello, We are being affected by a bug that disconnect the Virtual-Wire interfaces in the switches. We are in 8.0.8 version and we wanted to upgrade to latest 8.1. We discover recently if we upgrade to 8.1.0 the bug doesn't affect us and the TAC told us to upgrade to 9.0. Anyway, the compatibility for 9.0 version requires also upgrading Panor...
hello,I recently installed the device certificate on the FW but the certificate is valid for only 3 months. Do I have to install it every 3 months ? Thanks!
Hi , Could you please confirm the cmd equivalent to "commit and push " in panorama . I am trying to commit the changes using Panorama cli . I tried using commit partial device group <name> but changes are only showing in Panorama not on the firewall . Thanks
HII try setup a policy to allow traffic for OneDrive for Business. but the traffic all just incomplete. My PAN os is 7.0.1, I allowed all onedrive, sharepoint, sharepoing online, office365, ssl and web browsing, but still cannot communicate with onedrive, all traffic show incomplete. do you have any idea. Regards and thanks
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
reaper
on:
Server monitering -Connection refused
