I need to deploy a firewall for medium sized enterprise so need help here to understand the Firewall throughput and how to evaluate the Firewall throughput for a network.
We are having installed a 10 Gbps Light Wave service for a WAN connection and will have PANs on either side. (The PANs will be on the same /30 subnet, and the Wave service appears to be a raw fiber connection terminated on physical PAN L3 interfaces). We want to authenticate the other end and encrypt using IPSEC. Do I need to build a tunnel inte...
Hi, I am new in Palo Alto Networks and have few questions about NFR VM-Series Firewall. Hope you can help or guide me please. 1) How to get NFR VM series licenses?2) What are the options for NFR VM?3) How to license them? I do have partners login but currently doesn't have an access to support portal.
Dear Team, As per the customer requirement we want to perform Port spanning or port mirroring on the firewall interface so we need confirmation whether it is recommended from Palo Alto and if we perform this will there be any impact on the firewall as firewall is in production at data center or is there any alternate method for this. Request you...
We have 2 palo alot firewalls & we are trying to establish a ipsec tunnel between both. We proved that all vpn configurations are correct and were able to establish the tunnel & pass traffic but only if we add a firewall rule saying allow any/any/any/any at the very top of the rule base, which goes against our security requirements. O...
Dear Patrons, I had an issue with PA where secondary active firewall stopped processing the traffic and unable to access the device from remote as well. We did a hard reboot to bring up the device and the connection restored successfully, but we wanted to investigate hence downloaded the Tech Support file and found HA2 went down, and also there...
We use two PaloAlto PA-220 firewalls at my work place, and I have been so amazingly impressed by the GUI interface and all the reporting tools on PA devices (especially the Application Command Center ), I was considering piking up a 2nd hand PaloAlto PA-820 or PA-850 from eBay and using it at home with my existing Cisco SG-350X-24P Switch.Bas...
Hello everyone,I was hoping to get couple ideas on the problem that we currently have and cannot give a solution yet.About a year ago we were able to migrate our old firewalls infrastructure to PAN.We had 1 firewall facing internet(Sidewinder) - basically for Destination NAT functions, MS ISA server as proxy and main firewall (behind Sidewinder)...
Hello I am trying to exclude some domain from coming through the gateway to improve user experience so they are not hair-pinning through our DC's at the moment I have no access route entered so I am running 0.0.0.0/0 out of our DC's - there are are certain domains for Microsoft updates, teams and hosted business services when I add them to exclu...
Dear Patrons, There are two IPS in place with following configuration. Objects > Security Profiles > Antivirus (Reset- Both)Objects > Security Profiles > Anti-Spyware (no detail found)Objects > Security Profiles > Vulnerability Protection (Reset- Both)But we noticed that one IPS shows the filename in threat log (setup.exe) but ...
I have very simple topology Huawei switch Eth-trunk----------------Aggregation Palo alto ------------P2P------- Router In Huawei switch created two vlan's vlan 10 , vlan 20interface vlan 10ip address 172.16.1.100interface vlan 20ip address 172.16.2.100ip static-route 0.0.0.0 0.0.0.0 172.16.1.100 In palo alto Aggregation with two sub-interface...
Hello Community, My company has a Cisco VOIP phone system. We recently switched over to PAN220 to PAN220 firewalls w/ IPSEC VPN tunnel connectivity between our two locations. We are experiencing significant problems with a single Cisco ATA 191 SIP device:https://www.cisco.com/c/en/us/products/collateral/unified-communications/ata-190-series-anal...
Hello , Can we intergrate Prisma SaaS into Panorama and All the centralised policy and Monitoring via Panorama ?? Any related document ? Same like other DLP Vendors . for eg Mcafee EPO integrates well with MVISION ( Sky High)
We have split-tunneling enabled for our 400+ remote users, but recently was asked if we can disable split-tunneling for a single GlobalProtect client. We are running PAN-OS 8.1 code and GlobalProtect 5.0. I don't see a way but thought I'd ask. Thanks
Hello All,Just want to start by stating I have not tried this yet so I am asking the community to see if anyone has. The question is, will maps/directions and geo location work correctly for a mobile device if the mobile device is on GlobalProtect. Typically when you connect to a VPN you get the 'location' of the nated IP, so I am looking to see...
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |
