Hi team, How to make work the Palo Alto Captive portal after users logged in to Global protect. ?Users who got connected to GP should get captive portal auth page while they try to use internet.Is there any way to achieve this ?
Hi everyone! I have such kind of problem, maybe some of you have faced this.I've blocked Chrome, Firefox and Opera, but it also blocked Microsoft Edge, which should work.I tested deleting this application filters, which I created and found that the problem was with Chrome app filter.I have shared it here. What can cause a problem?
We own a wildcard cert from Digicert for on-prem or cloud hosted websites. When doing decryption traffic to our websites breaks and i had to uncheck 'block untrusted certificates' to make it work. How can i keep blocking untrusted certificates and still allow traffic. I know i can create a separate profile for known websites, but i was thinking ...
As the title, is this physically possible? Long story short, have a requirement to connect remotely to a company users laptop, which is connected to GlobalProtect VPN... via remote desktop from another pc on the same companys LAN Have attempted to connect from a pc on the company LAN to a user working from home who is connected to GlobalProtec...
Hi, We are using a PaloAlto 3260 with PanOS 9.0.7. We have configured SSL decryption wich uses a certificate signed by our own Windows CA server. Each client in our environment has the Windows Root CA.In the beginning (2 years ago) everything worked well. We could decrypt everything except everything in the category financial.But now latest mont...
Hi all,Is it possible to ddd prepends to a static route redistributed to BGP?
I created two Virtual Router for internal bgp peering to export routes. Virtual-Router-1 - loopback-interface- 5.5.5.5/32 ; zone-fiveVirtual-Router-2 - Loopback-interface-6.6.6.6/32 ; zone-sixsecurity policy any-zone to any-zone is allow. I am unable to ping from 5.5.5.5 to 6.6.6.6 or vice versa. BGP peering is getting established but advertised...
Anyone else got trouble with Dynamic content updates?? Failed to download due to generic communication error. Please try again later.Failed to download file
We are performing a pcap on our Firewall. We are capturing all traffic between two different Cidr's.We see all of the sip information. We see full bi-directional traffic. We then see 2 RTP packets for each call then nothing else in the capture. The packets are not dropping, We know RTP is indeed making it because there is no problem with the aud...
Hello, As the NGFW supports routing & switching capabilities why do I need to add a router to connect to the WAN, I am mainly using OSPF and BGP and MPLS in my router and all these features are present in a NGFW, I need to understand if I really need a firewall + a WAN router or a NGFW alone can do the job? Thanks
Hi TeamI try since yesterday to check URL categories but service does not work.Please check what's going on.My browser give me:502 Bad Gateway. Thanks for advice.Przemek
I have a question about using App-ID. Can you block an application just by using APP-ID. I have a situation where my firewall is in a default allow environment. I know this isn't a best practice but it is a complex environment and there are a lot of politics so it is what it is. Anyway, I tried to block a service based on App-ID and it is no...
Ok, the task is stimple. I want to allow only one particular URL accessible from youtube. Let's say the URL is this:https://www.youtube.com/watch?v=-RyESqegW9Y&I created a custom URL category and put this URL into it: *.youtube.com/watch?v=-RyESqegW9Y SSL decryption is enabled and working in my network. I created another Custom URL category ...
Hi,I cought a another bug on PAN OS 9.0.4. when we exporting NAT rules to whatever format PDF/CSV we are not getting proper output as expected. Its giving some garbage information alos.
In the system log.. receiving the below-mentioned error message frequently... It's any bugs? PA-850SW Version 9.0.2Error message (An Out of Memory condition occurred and restarted the process )
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
reaper
on:
Server monitering -Connection refused
PavelK
on:
Commit Failed
