Hi everyone how can I give only office 365 app to users and give no permission to access other web browsing without url filtering linsense, help.
How can I allow an FTPS (FTPES) connection? I assume the PA tracks an FTP connection and understands the related data connection. Does it understand FTPS? If I set a policy for ftp, it fails when it tries to open a data connection.Kim
I am looking to upgrade our VM Panorama devices from 9.0.6 to 9.0.9-h1 but whilst I can 9.0.9h1 via Panorama>Device Deployment>Software I cannot see it available under Panorama>Software. Does that mean that it is not available for my device?
I have setup GlobalProtect with Pre-Logon configuration, but between the "pre-logon" status and "post-logon" status of the same computer I am getting 2 different IP addresses. For example, during pre-logon I get 172.16.4.201, but as soon as a user logs into Windows I get 172.16.4.200. Is there any way to keep the IP address the same between th...
Hi, I would like to migrate one PA 4020 EOL device which is on PAN-OS 7.1.8 and I got one new PA 3250 with 8.1.13 PAN-OS. Can someone please suggest how I can do this migration? I appreciate your time and help.
I seem to be having an issue where the microsoft_graph_secapi output nodes aren't succesfully connecting to Azure. I don't know what I could have possibly configured wrongly to cause this.
Dears,I'm new in paloalto firewall. We deployed PA-VM in our provider Bluvalt cloud (openstack) and we need to use vpn site to site tunnel with another provider. I will be grateful if anyone can help us to make the settings from the beginning.
Hello I know that on this forum few peoples reported that this configuration working (but still isn't supported). I moved config from my old userid server to new one (everything typed from keyboard) but when I try to start UserID I got error: 05/30/17 14:05:00:193[ Info 1213]: New connection 127.0.0.1 : 55295. 05/30/17 14:05:00:209[ Info 1286]...
Hello,I'm getting a Threat Detection - Virus/malware identified by the name "Virus/Win32.WGeneric.akrgog" when a user tries to open a particular PDF file. When looking at the Threat log I can see the PDF file being blocked and identified as a 'Virus.' In the same session, I can also see additional files with the extension .aspx being allowed. I ...
I have internal globalprotect setup on a system, but i don't see any user-ID associated with that system IP. It is configured to save credentials. User-id is configured on zone and interface management profile as well.
Hello Team,New to palo alto..and need one help. Below is my topology.I want 10.1.1.0/24(vsys1) to communicate to 10.2.2.0/24(vsys2) and the route is via L3 device.What should be my policy here? Shall i create below policySource Zone-Zone ASource IP-10.1.1.0/24destination Zone- InsideDestination IP-10.2.2.0/24Service -AnyAllow And one more fromSo...
Hi, I have installed VM series panorama version 9.0 but it required every day VM reset to load the web gui. is there any bugs in the panorama version 9.0?
Can some one help with documentation with running debug commands on palo alto firewalls.For example syntax to monitor traffic between two particular host.Thanks for help in advance.
Hi all,I like to ask if it is possible, and and hot to build a scalable solution for AD grouping info to all firewalls managed by panaroma so that they can create firewall rules based on user id and grouping. Current environment I am testing:1 panorama1 VM firewall configured as standalone master device in a device group. It queries AD, look in...
I've been playing around with trying to block Facebook posting but allow all other access to Facebook. I setup a deny rule for the 'facebook-posting' app and then setup a rule below it allowing 'facebook' but, this doesn't seem to stop posting. The logs don't show any traffic for 'facebook-posting' so wondered whether this will only work with SS...
PavelK
on:
How to build SCM Managed NGFW with no management internet access
reaper
on:
Server monitering -Connection refused
OtakarKlier
on:
Commit Failed
OtakarKlier
on:
SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3
