Hello experts, Is there any way in Palo Alto to block email attachments coming from specific domain?Lets say i want to block all email attachments which are coming from *@xyz.com. Is it possible?
Globalprotect stopped working on user's Macbook. After reinstalling Globalprotect (version 4.0.5-8) on macOS Catalina in version 10.15.4, it is not possible to click on Connect, even the window for writing username and password is not displayed. All options in the application are grayed out. Please provide some solution. Anna Strupiechowska, IT ...
Hi I am running Minemeld on Ubuntu 16.04 The server is starting to show up in Vulnerability Scans depsite updating Ubuntu. This is a list of the Vulnerbilties. TLS Server Supports TLS version 1.0 TLS Server Supports TLS version 1.1 Diffie-Hellman group smaller than 2048 bits TLS/SSL Birthday attacks on 64-bit block ciphers (SWEE...
Hi everybody, I'm getting through this issue: although we have 3 gateways configured in our portal, my GP client allways connect to the same one. How to deal with this client behavior?Tks in advance
How we can set up email Alert for report We have an O365 email environment that is based on Azure Cloud. looking for Email alerts for reporting and My Email ID has MFA for accessing the emails. Now I have applied my Email ID in the Palo Alto 3060 for report sending. after applying Email Profile and Attempt to test the Email-scheduler. An Error t...
This is a question about how a firewall, FW, keeps IP to UID associations current/up-to-date in an environment where such associations might be changing every few seconds. A FW associates a UID with an internal IP address, e.g. 10.10.10.10, which has no UID associated with it. Let's say that I logon as ipj1965 from 10.10.10.10. The first time a ...
Hi Anyone, I'm trying to logout all GP VPN users forcefully logout from the gateway either doesn't logout users or no errors throwing on command as well >request global-protect-gateway client-logout gateway gp-gateway reason force-logout user * computer * Login & logout time is same before and after execute this commands. Please let me kn...
Hi Everyone, Learned something new from you today.We are going to enable SSL decryption for Inbound traffic coming from Internet to our web servers.Need to know when does PA intercept the traffic coming form Internet to the web server which is hosting the website? During 3 way TCP handshake or when first Data packet comes? RegardsMP
PAN-OS - 8.1.12 Want to understand the below Massage and Why it occurs ?? >less mp-log routed.log 2020-04-15 09:28:05.296 +0400 TM_SPF: start full SPF calculation rid 172.16.80.162020-04-15 09:28:05.296 +0400 TM_SPF: Do the full SPF calculation rid 172.16.80.162020-04-15 09:28:05.296 +0400 TM_SPF: full routing calculation finished rid 172.16....
PAN GPA is giving error , checking service on PC it reports stopped when I try to connect through agent. Tried to uninstall and install again , did not help. anyone faced same issue ? T14992) 04/17/20 08:50:44:186 Debug( 692): CAC, name is DigitalMediaDevices(T14992) 04/17/20 08:50:47:523 Info ( 246): InitWinConnection ...(T14992) 04/17/20 08:5...
Hello, I have a question related to the actions that I can configure in Security Profile. Specifically, Vulnerability Protection. What happens if I set the action as "Alert"? Will it drop the connection? Or the connection will be permitted, and it just logs the traffic of the malicious action executed? Regards,
I am currently working on a network redesign project with all Cisco gear. Our network engineer is opting for a complete HSRP Active/Active environment. According to all deployment documentation, HA Active/Passive seems to be the preferred methed for the Palo Alto's. I see that the PA's do support A/A HA using VRRP, so I do not see a configuratio...
Can you form a HA cluster with a PA-3020 and PA-3060? Or do models have to be identical?
I am planning to upgrade Panorama and my few HA clusters to version 9.0.6. Currently all these are on 9.0.3-h3.Need your experience on 9.0.6 if anyone is already running on it. Is there any unknown issue/bug observed on this version?I have completely aware of known issues but just wanted to check if anyone observed any bug on this version and cr...
Hi Everyone, Hope everyone is staying home and Safe.I need to import the certificate and the private keys to the firewall from the web servers.We have this certificate say *.city.ca and this is associated with few websites like maps.city.ca. or recruiting.city.caAll these urls have same public IP address say 209.x.x.x When I import the certific...
