Hi everyone, Need to confirm if Diffie Hellman is used in Global protect VPN - IPSEC.?As per my knowledge it is not used. RegardsMike
Is there a way to generate a custom report of users/sites that have entered credentials? I checked under the URL database but don't see a Credential Detected column there that I could pull in. Anyone have a method of generating a report from the phishing prevention feature?
Dear All,I was facing disconnection issue with our internet firewall, cannot ping to LAN interface, all services related to the LAN interface was down like internet connection, MPLS and DMZ Zone, once I reboot the firewall everything back normally and the Lan interface working fine, we need to investigate to avoid the issue in future. I have che...
Hi, I am using PA3200 firewalls and require multi vsys capability.I need 4 vsys, so shall I need to purchase a license for 3 vsys only?ORA multivsys license can activate all supported vsys ? Thanks.
Hello Community. I have been observing the logs coming from one server that is behind the PA-FW and while going around the VM, trying to connect to the Azure admin portal, I have observed that it has a slow connection for a 600-700Mbps. While trying to track the logs from the firewall it shows that traffic is having TCP-RST-FROM-CLIENT or TCP-RS...
Thanks for any help you can offerPanorama 9.1 instructions show this image about using edl's as part of a url filtering or ssl decryption policyHowever even though I have several EDLs configured and working I am not given that option. See images belowHow can i enable this functionality.Here is a screenshot of my edlsAnd here is were I am missing...
Dear Team, We are not getting proper report for Last calendar month using query builder i.e (zone.src eq VPN) and destination is any and report has generated from 17 April to 23rd April.When use query builder i.e (zone.src eq VPN) and (zone.dst eq LAN) it is showing whole month report i.e starting from 1st April to 30th April. RegardsKarthikey...
Hi ,is it possible to block a sender of email in paloalto firewall eg [email protected] Thank you,
Hello! Not new to networking, but new to PA, so looking for some configuration advice. Have a PA-3220 and would like to add a second ISP connection for redundancy. If that was all then it seems pretty simple and I've found several KB articles on how to accomplish that. However I have a /24 and /27 block of public IPs that I also need to route...
hello team One of our uses got the server certificate is invalid ERR while he trying to get the global protect connected, I renewed the gateway certificate and tested on a Windows box which is fine, but Mac book user got an ERR. Did anyone get the same issue before? Thanks
(T14508) 05/04/20 09:48:34:904 Info ( 474): msgtype = user_credential(T14508) 05/04/20 09:48:34:904 Debug(2642): ServerThread: ProcessServerUserCredential. Redirect to processServerPortal.(T14508) 05/04/20 09:48:34:904 Debug(1714): ----portal processing starts----(T14508) 05/04/20 09:48:34:904 Debug(1736): User profile type is 0(not roaming)(T14...
Hi PA Live Community, Still a newbie to the whole PA world but slowly getting there.When looking at the ACC tab of the GUI I can see there are entries for "Applications using Non Standard Ports" and also "Rules allowing Applications on Non Standard Ports" Screenshot attached below.Can someone explain why this is alerting as it is? I am using A...
Hi All, I need help on how to replace one Faulty Paloalto 3250 firewall PAN OS version 8.1.6 which is in HA and policies are managed through Panorama. your help is highly appreciated and thank you so much. thnxJP
Hi there. Documentation is rather slim here. I've set ut MFA for web site access, and it works. When testing it for non-http, accessing a SSH server, it kills the SSH connects, but no 2FA challenge on my GP. What am I doing wrong? What's needed? I've done this: "Set Enable Inbound Authentication Prompts from MFA Gateways to Yes" https://www.pal...
Hi All,I have followed the PA design for creating an HA Active/Passive pair of PA220s. I see however that HA1 Backup is showing red/down. Attached are the relevant sections and a High Level Topology of the HA setup. Any advice?If I reboot the active PA the Passive one does take over so not sure what issues this HA1 is causing if any.Also, the ma...
PavelK
on:
Replacement of RMA
