Minemeld install on Ubuntu 18.04 issue

Hi All,

I have installed minemeld on Ubuntu 18.04 using Ansible Playbook. I have followed the instuctions on https://github.com/PaloAltoNetworks/minemeld-ansible#howto-on-ubuntu-1804 and rebooted the device but I get the Error Checking Credentials:

BI- DIRECTINAL NAT IN PALO ALTO

BI- DIRECTINAL NAT IN PALO ALTO

Go to Policies > NAT > Add

Create a NAT Rule:

1. Name the rule as per your convivence.
2. Select the source zone as LAN
3. Destination zone as WAN
4. Interface as the WAN (exit interface)
5. Service as the preferred port.
6. Source ip address

What apps and services are used for Meraki Cloud?

I can't seem to get the policy right for my Meraki APs to check in with the meraki cloud. I have allowed DNS, Ping, Meraki-cloud-controller using any port and allowed to *.meraki.com and *.opendns.com. Still see stuff hit my deny. Anyone know the cor

PA3020 fans always running at 100% speed?

First thing I noticed when I plugged this in was that it's very loud. Normally a device spins down the fans when it's at a cool temperature (which is pretty much all servers and appliances from the last 10 years).

So is there any way to change the fan

Disable Application Packet capture

I am having firewall managed using Panorama .

I am planning to disable application packet capture on specific device .

Can i do using panorama or need to do from individual firewall.

Thanks  

Tackling Google Stadia

Greetings all,

As I'm sure most are aware Google launched Stadia this week. Has anyone had any luck with blocking access to this service without hindering the use of other Google resources? I know this will be a temp fix due to eventually it will be

Zone protection for scan up / ports from internet ( untrust)

Hi ,

Anyone enable zone protection for protect and drop scan ip and ports from untrust / internet to DMZ or untrust ?

i enabled it but I have alerts only from DMZ to untrust and not from untrust to DMZ or untrust to untrust.

Unable to delete Certificate

Hi

I need to delete a certificate from a PA-3050. The certificate is currently EXPIRED. When I try to delete it it says this message

     1- Failed to delete Certificate - MYCOMPANYWildcard 2014-2017-FOR_DELETION.
  °  MYCOMPANY Wildcard 2014-2017-FOR

Palo Alto HA in an Azure environment

Global protect on MAC, with proxy settings

In our company, we do not allow split tunneling and access to Internet(while on VPN) happens via only proxy. We are using on-demand mode. 

Once MAC users connect to GP,proxy settings apply. Only browser which works in this setup is Mozilla Firefox. 

I