In my organisation,Can i block personal gmail and allow corporate gmail access and its connected application .? WHat are steps of that policy ,pls share
Hello Team, Is there any way to configure static IP for VPN(Global Protect) users. Example:-I have an IP pool - 192.168.1.0/24User A, UserB, User CAuthentication profile is (Active directory)When user A will connect through the external gateway for this user IP address should be assigned - 192.168.1.10When user B will connect through the externa...
we are planning to upgrade ur existing PA-5020 to bigger boxes. our current 5020s are struggling to handle the ssl decryption and it sometimes give ''Dataplane CPU under severe load'' logs on busy days. I heard 5200 series are specfically designed for decryption . However I have 2 questions here:1.What can be my best options? PA-5050,506,5220 or...
If inbound SSL inspection when using Digicert certificate is not supported, what is the alternative. We have many web-servers using same wildcard cert used for GlobalProtect and wanted use this same certificate but it doesn't work. Is there any other mechanism to implement inbound SSL inspection.
What I am wanting to know is if I can add a range of IP addresses to a vulnerability exception.This would be the entire 1-254 range, rather than 1 IP address at a time. I have already checked the links below and they talk about adding IP addresses one at a time as an exemption.Rather than allowing the vulnerability for the entire site, I would l...
I have a pair of VM 300s in active/active mode and everything is running OSPF. PA1 is primary and PA2 is standby. I noticed I was missing a bunch of traffic for anything going to the standby router. I can ping every interface on the standby sourced from the loopbacks on each router but I cannot route through the standby.The OSPF table shows both...
I am curious to know if the organization I work at gets a blast email to 500 employee's from an external B2B marketer does the wildfire analysis get performed on all 500 identical emails or does it simply do it once knowing the email and links are identical.
Hi guys,I need some help with configuring network in VMware Workstation and Palo Alto. I tried to build VMware lab using both Udemy and CBT Nuggets video courses:The problem is that I can't have my Palo Alto to have an access to the Internet. It doesn't matter what type of network adapter I use NAT or BRIDGE. Below are my network settings:Networ...
Dear Community, I have a Panorama with several firewalls in a device group under the share one.I have several templates and I cannot select any shared object from DG into any part of template configuration, for example adding an address object as an interface´s address or into the user ID´s include list. I´m using super admin account to attempt ...
My requirement is that some user should use Pre-logon and other should use User-logon. Currently all users are using only user-logon mode. Is it possible to use both mode in global protect, because we have to call client certificate profile on globally for pre-logon user?If yes can you please guide me how can i archive this and Is there any dow...
HI, I am after permitting only MS Intune and Windows Update - block all internet access.I have followed the custom URL filtering as mentioned in the link below:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRfCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetailCreated the custom url filte...
Hi, I have the below configuration for qos , and there are policies also configured . If I want to disable for sometime , Just unchecking the checkbox under Enabled will help ? Or even after un checking the traffic will fall under class 4 ? Or do I need to remove or disable all the policy ? Thanks
Hi,I have traffic shaping enabled on FG and at the same time PA also.traffic flow is as below client goes through FG then PA then go to internet or wan traffic shaping policy running on fortigate , and qos policy is there on PA also Let's say if i set bandwidth for client A ON fortigate 10 Mbps and 20 Mbps on PA , Speedtest Showing 10 Mbp...
Hello, what process and what is going on if a session (SIP) is created by "Syn Cookie" ?Is this a valid Session, does this indicate a Problem ? We configured an App-Override Policy to mitigate Problems between Phone-System and SIP ALG.We see now all Sessions are created based on Syn Cookies. René
I followed the guides to set up an IPSec site to site VPN tunnel between our main office and satellite office using static routing, but I can't access our servers through the tunnel. From the main office, I can access everything on the satellite office's subnet, but from the satellite office, the only thing I'm able to access through the tunnel ...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
