For a home user who uses VPN to access internal network, how can we block all his SSH outbound connection to internet?
Palo Alto has recently released signature for CVE-2020-3452. however when performing a POC, I cannot detect any threat. I am using link available to public use - https://<domain>/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ but when tried, there is no threat being detected...
So, you would think this would be an easy thing to learn and configure, however I can't seem to find the answer from any PA walk through, or through PA support. I'm simply looking to configure my PA-3020 (PAN-9.0.0), so that if a new threat is detected in the threat list, that I will be notified via email. I have already setup PDF summary, but...
Is anyone using Mitel Connect and Softphones in a remote work environment where the user has GlobalProtect? We are trying to get that to work. The only issue we have at the moment is that the microphone isnt working on the remote device. The user can hear the other person, but cant be heard. Its like the microphone traffic isnt going back up t...
Hello, I have a setup of Two AWS_VM-Series_Palo Alto devices, which are acting as Standalone firewalls but as Primary and Secondary respectively on AWS. Due to some limitations, I cannot configure HA between them, however there is a tunnel connecting these two firewalls for manual traffic failover. Now I would like to setup tunnel monitoring and...
could someone advise me to set rate-limit for guest(10.1.10.0/24) traffic in this topology I read the article that We need to apply policy on egress interface always. Hence, for upload, it's on outside interface connected to Internet and for download it is on inside interface (ae) connected to SW(1) Internet Speed 500 Mbps(2) Rate-limit for Gu...
Hello, We have GP set up and one of the settings include "Exclude video traffic from the tunnel". However, we have come across an issue that private site for developers hosted in 10.0.0.0/8 network includes internally hosted videos (http-video app-id) needed for work. So when user tries to connect to website while connected to GlobalProtect, it ...
Hello,We were forwarding log from PA-5220 to syslog server.On July 2, 2020, our syslog server failed and it was unable to get most of the July 2020 logs.Now that the syslog server has been recovered, I want to forward the logs that from July 2, 2020 to today to syslog server.Is this possible...?Could you tell me how if possible?(Sorry for my poo...
1) Why is this virus triggering in Palo Alto events and Palo detecting this & alerting ?2) How hashes are different, is there false positive. DetailsSourceMD5SHA-1SHA-256Virus/Win32.WGeneric.akbori(345886398)Paloaltoce27d52c7d1f59ad2c867e97339fa2122dda6a0bb6c587c0b8731c094d76187b80c866d137aa186c2e7ca3e3f22264da9744995252e131469a8261761ce2ae3...
Hi, we have banned the http-proxy in school to stop them downloading and accessing sites they shouldn't, however they have now found using https based proxies bypasses this. What is my next possible solution in my ever on going war with students. Any advice / help much appreciated. Thanks in advance.Darren
Hello,Anybody ran into such issue with a PA device ?"Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(8,2)"Then device goes into loop boots... No way to make it boot, even using the maintenance partition.Is there a way to use the front USB port to rescue ?Any idea ?Regards,Laurent
Hi,We own a PA-2050 running version 5 of the pan os in a school.I have recently noticed that we are now approaching the ssl decryption limits of the device. i.e. 977/1024.Previously I didn't know that there was such a limit.What is the best method to reduce this number?ThanksWarwick
Dear Patrons, I was attempting to perform the dynamic update (specifically anti-virus update) but I noticed there is no "dynamic update" menu, somewhere I read that M-100 series antivirus update can only be done over CLI, is that true? Not only the dynamic updates menu missing, except "managed devices", "device deployments" none of the options ...
Hi, We are in process of implementing Ansible for PA Security Rule Automation. We are using panos_security_rule module for rule creation and it creates a new rule at bottom, which falls after cleanup rule.Using Ansible modules can we move the newly created rule above to the cleanup rule or while we creating a new can we mention the line No. on w...
Hello,I set up and configured MISP node in Minemeld.From MISP instance Minemeld is able to pull indicators without error.Analyzing the log of these indicators I noticed that the parameters first_seen and lasts_seen belong to the feeds list instead that to the indicators itselfThis is an issue in order to manage the aging of indicator.Is it a kno...
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
