General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! 'unknown ikev2 peer - Azure

Hi,

I have several Azure sites with an active-active gateway and 2 different ip.
I have a Palo Alto pa-820 with 8.1.12 firmware, 2 interfaces with 2 different communication providers and different public ip.
What makes a tunnel ikev2, bgp and peers.

Sch

...

Zero-trust region policies

We are testing out using a Zero-trust policy to block traffic to and from all regions but a few known good or needed regions. I am running into issues with Microsoft, AWS websites and services that roll to different data centers and IPs around the gl

...

Resolved! Global protect Compatibility Check

We are planning to go with the Preferred GP version 5.0.7. As currently the users don’t have the privilege to upgrade to this version on their laptop, is it ok to first install the GP on client systems through Active Directory Group Policy and then u

...

Certificate

Hello All. I set up the directory service for the first time yesterday. Everything works, but I noticed the certificate I have to create is only valid for a few months. Do i have to renew it in the future?

https://4kpornindex.com/

restrict global protect vpn based on mac address

Could you please assist me how to allow specific mac address while connecting global protect vpCn

Resolved! Same CLI commands with different cli output for Palo Alto Firewall

hi,

I am experiencing a strange behavior for 3 Palo Alto Firewall. The same 2 CLI commands to check if the firewall has implicit deny rule and logging in place. Commands are as follows;
#show rulebase default-security-rules interzone-default | match ac

...

Odd behavior around ISP Failover with Static Route Path Monitoring

Hi,

I had an unexpected situation occur recently with regards to failover behavior on static route path monitoring. We have 3 ISPs, and this past weekend 2 of them went down at different times (hooray). For the purposes of this post, I will be talkin

...

Resolved! Is there a secure way to generate XML API tokens?

I've been trawling Google for a while now trying to find an alternate way to generate the XML API token. However there only seems to be one method to do so.

Maybe I'm a little paranoid, but it seems really insecure to send your admin username and pass

...

How to add feed for github IPs?

Little confused on how I actually do this. I want a list generated on minemeld from the following page: https://api.github.com/meta

How do I go about making it so that list is referenced via a policy to allow github APP to that list of IPs? I am a

...

Overloading 5220 with 9.0.x

Hi

I update my firmware from 8.1.10 to 9.0.5

now I can bring my 5220 to its knees with my mailist run

So email consist of pdf attachment - approxy 3M. but about 4K emails all around the same time

This wasn't a problem before on the 8.1.10 .. but on 9

...

Resolved! PA-500 Noise Issue

Hello,

We have PA-500 Firewall and it is making a lot of Noise but the Indicator is showing Green.

Can anyone suggest what could be the issue and how can it be resolved.

Also, i am not able to find any Pala Alto Support here in Dubai where I can get the

...

Resolved! Replacing fan tray in PA-500

Hi all,

Apologies, I am new to the PA forum, first time poster here. I have a job coming up to replace a fan tray in a PA-500. I tried to find some documentation since I have not carried out this type of work before but I can't see to find any. Are fa

...

Resolved! PPTP/L2TP Tunnel on PA

Please let me know if its possible to configure either PPTP or L2TP tunnel on Palo Alto. Please also share the steps to do so.

Indentify internal users using thinclient machines.

Hello ,

Can anyone help to identify users on thinclinet machines(linux). These machines have same ip and mac-address and are recieved by a server. We use machines from n-computing.

I was thinking to use captive portal but i suppose that it wont work

...

GlobalProtect usage PDF Report

Hi,

is it possible to get a daily/weekly PDF Report over succeeded and failed GlobalProtect authentifications?

I only found the CSV Export inside the system log with an active filter (like (eventid eq globalprotectportal-auth-succ)). I'm looking for

...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free