Hello , Can we intergrate Prisma SaaS into Panorama and All the centralised policy and Monitoring via Panorama ?? Any related document ? Same like other DLP Vendors . for eg Mcafee EPO integrates well with MVISION ( Sky High)
We have split-tunneling enabled for our 400+ remote users, but recently was asked if we can disable split-tunneling for a single GlobalProtect client. We are running PAN-OS 8.1 code and GlobalProtect 5.0. I don't see a way but thought I'd ask. Thanks
Hello All,Just want to start by stating I have not tried this yet so I am asking the community to see if anyone has. The question is, will maps/directions and geo location work correctly for a mobile device if the mobile device is on GlobalProtect. Typically when you connect to a VPN you get the 'location' of the nated IP, so I am looking to see...
Just a heads-up to anyone on 8.1.8. . . There is a cosmetic bug that throws bogus dependency warnings even when the dependent apps are included in the affected rule. It will be fixed in 8.1.9 at the end of June, per support.
Using PANOS 8.1.11 and trying to export the list of policies along with the source/destination IP addresses, however I can see the policy names fine, but the source/destination/zone/apps/services columns are jumbled with HTML info. Is there a way to resolve this? I was using Google Chrome and when trying Internet Explorer it straight up errored....
Hi, Due to limitation of using port 443 we want to use custom port for connections to gateway from satellite.I believe changing port on portal config for gateway then doing destination nat on gateway should fix this issue.so satellite can connect to gateway fine.anyone faced same issue ?
Hi All,I am unable to login into learning center as guest. As I am already registered as guest. Every time I am going to login its showing a error. Can any one help me with this?
Has anyone noticed the ability to make inbound connections to a GlobalProtect connected MAC OSX system? We had recently enabled split-tunneling thanks to the big bad video conferencing applications. But quickly discovered that on MAC and Windows systems, when domain or application split-tunneling is enabled, all inbound access from the local ne...
i have two external IP addresses listening on port 22. NAT rule does a Port translation for this.External IP1:22 -> Internal IP141:2222 (PAT from port 22 to 2222)External IP2:22 -> Internal IP141:2223 (PAT from port 22 to 2223) Traffic to/from external IP1 on port 22 work fine... but traffic to/from external ip2 do not. Is this something ...
Hi team, Just posting this if others setting up PPPoE on new PA-220. There was one or two check boxes to complete so hopefully this saves others some time. The ISP for this one was Eircom, and used default PPPoE settings for that ISP. ethernet 1/8 tab 1ethernet 1/8 tab 12ethernet 1/8 tab 3Tab one - Add a L3 interface, add to a Virtual Ro...
Hi Team 1. After connected the global protect DNS resolution is not happening. but i can able to do ping 8.8.8.8. 2. In nslookup google.com also resolved. But if I ping the same google.com dns is not resolving. 3. If I browse any website, that is not working due to dns resolution issue. My dns IP is 8.8.8.8. Is anyone experienced like this type...
Running a PA-820 Software Version8.1.10 I run a bandwidth usage report that shows ip addresses using bandwidth, but no domain username. How can I get the non-Domain devices such as byod to authenticate to the network before gaining network access? My goal is to be able to run a report and see which devices and which credentials are using bandw...
Hi Palo Alto community, Hope all of you are doing well.May I ask for assistance in blocking file-sharing in ms-rdp? here is the scenario:1. User is connected to the globalprotect VPN2. Vpn user uses ms-rdp to remote Virtual PC behind the firewall3. We are trying to block file sharing over this application(ms-rdp)we have checked this knowledgebas...
PA Firewall local Administrator account is locked out.ReadOnly Account from which we are able to log in as of now. The device is standalone & the following service is not available like AD credentials / RADIUS or TACACS. Only local devices. its any way to do without maintains Mode for reset or recover the password?
Just FYI,There is currently a bug within 8.1.7 and 8.1.8 that renders the AUX ports inoperable on the PA-5200 series, which depending on your configuration can cause issues. The Bug ID is PAN-105737 and it's been fixed in 9.*, but you might want to hold off upgrading until its been fixed or update your configuration to remove dependency on AUX i...
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
reaper
on:
Server monitering -Connection refused
