I'm new to PAN OS and I'm looking to learn what it has to offer. Is there a way to license the device and panorama for lab use only?
I want to configure an IPSec VPN tunnel with redundant VPN peers primary peer "A" using tunnel1 and secondary peer "B" (if "A" goes down) using tunnel2. I can configure failover using Tunnel Monitoring, but my question is "Why are routes to my VPN peer network installed in the routing table using tunnel1 (more preferred) over tunnel2?". I cannot...
We have PA 9.1 running vwire for vendor traffic.I need to create ssl decrypt cert for the user traffic going to internet. Seems SSL decryption can work in vwire mode.When I create self signed cert for the user PC what should I put under common name?any name will work?As traffic is sourced from the switch which is doing all the natting and it ha...
MortiAgent Malware is added to the Palo Alto signatures database? It's Palo Alto aware of this Malware? want to stop the MoriAgent malware.How to configure this in Palo alto to ?
Hi Folks, We have following scenario and unsure how to do it. Please let me know your thoughts: We have VM Palo Alto and we are implementing Global Protect.The Global Protect Portal and Gateway would be one and the same VM.We are planning to only have only one VPN link/URL which will be given to our customers.Now, we are planning to create all t...
Hi community, I am encountering decrypt-err with Anydesk application after deploying SSL Decryption. In order to fix that, I am going to create a list of Public IPv4 that Anydesk use to excludes them from the decryption. Currently I collected an IPv4 list and want to create an EDL so I can simply add them to exclusion list. I have created and us...
We're planning to upgrade the PAN-OS from 9.0.6 to 9.1.X version.Which is the stable 9.1.x version? Thank you.
Found a bunch of config lines as such. Where/how? Can't delete them. They don't appear in the GUI. set readonly device-group grpname address-group NAME_LAN_GRP id 289set readonly device-group grpname address-group NAME_LAN_GRP id 290set readonly device-group grpname address-group NAME_LAN_GRP id 291set readonly device-group grpname address-grou...
Hello, Is there a way to see the bandwidth that VPNs clients are using when they are connected through a VPN? I have not seen any specific report for GlobalProtect statistics, for example in ACC. Just logs in the tab Monitor, but they are not showing the activity of the users. Regards,
I have 2 physical ethernet ports on my Windows PC. 1 is for external internet and connecting to work VPN. The other is for a local-only ethernet network. When I connect to my office VPN via GlobalProtect, I lose access to the devices on my local-only network. How can I tell GlobalProtect to only apply to traffic on ethernet port 1? Why is it red...
8.1.0 is 782MB and 8.1.8 is 422MB. I deleted them both but i still cannot directly download 9.0.8 which is 423MB.I have also followed this KB and deleted content updates but still no go. Manual upload did work. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLSJCA4 Before upload show system disk-spaceFilesystem Size Us...
I need to deploy a firewall for medium sized enterprise so need help here to understand the Firewall throughput and how to evaluate the Firewall throughput for a network.
We are having installed a 10 Gbps Light Wave service for a WAN connection and will have PANs on either side. (The PANs will be on the same /30 subnet, and the Wave service appears to be a raw fiber connection terminated on physical PAN L3 interfaces). We want to authenticate the other end and encrypt using IPSEC. Do I need to build a tunnel inte...
Hi, I am new in Palo Alto Networks and have few questions about NFR VM-Series Firewall. Hope you can help or guide me please. 1) How to get NFR VM series licenses?2) What are the options for NFR VM?3) How to license them? I do have partners login but currently doesn't have an access to support portal.
Dear Team, As per the customer requirement we want to perform Port spanning or port mirroring on the firewall interface so we need confirmation whether it is recommended from Palo Alto and if we perform this will there be any impact on the firewall as firewall is in production at data center or is there any alternate method for this. Request you...
PavelK
on:
Replacement of RMA
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 2 |
