Hello. I am new to MineMeld. can we use MineMeld to setup an Automation ingestion and blocking of identified malicious IPs?
Hello, We have deployed a new panorama in aws environnement with version PANOS 9.1.3.The panorama is in panorama mode and recognize all the disks attached to the EC2 instance which is m5.2xlarge.There is 1 root disk for system and two additional disks of 2TB for logs. Panorama> show system disk detailsName : nvme1n1State : PresentSize : 204...
Probably a bit of weird question this one, but as the Evil Firewall Admin at an academic institution I sometimes get asked weird questions so I thought I'd pass the joy onwards. We have a researcher who is interested in data on piracy, and I thought I'd try to collect some data on bittorrent traffic (which is mostly allowed) including the filena...
passive firewallActive firewall.===============================================we did failover from secondary firewall to primary.After failover Primary firewall all vpn tunnels came up and On passive firewall tunnel info up.is it normal behavior on passive firewall tunnel info up ?or passive firewall tunnle info and IKe info should down ?active...
Hi Community, I can see my firewall is sending DNS requests ( request for A record) to resolve some of internal hostnames.I dont have GP/detect internal host configuredI dont have FQDN objects with these hostnamesI have exported and checked entire config, the firewall is not having this hostname in the configurationIt is requesting for A record ...
Hello, My query is, does Cortex XDR scan malicious URLs. Please share your valuable Intake on this query. Many thanks in advance.
Palo Alto and Fortinet are configured as internet edge firewalls.Dual layers FA Internet ---- Palo Alto ------- Fortigate -------- Trust zone. Outbound traffic is SSL inspected by a Fortinet firewall and the firewall acts as a forward proxy. All users are using Fortigate certificates in browser-trusted location. Palo alto is configured before F...
Hello, We are unable to open page externally. is there any article to point us on this issue? Using PAN-OS 7.1.10No recent change/upgrade done.All router config and NAT checked.No issue from ISP. Thanks in advance.
Hi,Could we have URL Category Mapping Between Bluecoat Content filter and BrightCloud. This would be required and useful for us to migrate from Bluecoat to Brightcloud filtering.Rgds,Tauseef Ahmed.
I have 2 AWS instances(Prod and Stage) each with redundant VPN tunnels to the same remote end Palo. I setup path monitoring for each so that when one tunnel is down, the route is removed and the backup route is put in the FIB. This only works with our stage instance and not our prod instance. In each case, the tunnel state on the AWS side doe...
On a PA-500 we locally downloaded the GlobalProtect client and activated it. Now we want to remove it from the firewall, because we are deploying it via our software deployment and the users should not be able to download it directly from the Portal. Unfortunately it's not possible to delete an activated GlobalProtect client via GUI or CLI. Is...
No Disable option available although its set to allow with comment. GP version 5.1.4
How can we remove GP from systems if its configured to not allow uninstall. We have students who are given laptop with GP installed, but as they leave its their property and GP needs to be uninstalled from them.
I am a superuser and I get a "has unexpected text" error when I try to modify any existing security policy.
Due to the recent expiration of the Sectigo RSA CA cert (https://support.sectigo.com/articles/Knowledge/Sectigo-AddTrust-External-CA-Root-Expiring-May-30-2020) and our Palo firewall SSL decryption policy configuration to block expired certificates we are noticing that any website that is publishing the old expired CA chain (for example netaoc.or...
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
