Device had been used with Panorama and now removed. Not able to retrieve the license to device now. Has anyone faced this issue before and is there any solutions?
Hi, I found this thread in General Topic (https://live.paloaltonetworks.com/t5/General-Topics/Unable-to-access-Windows-Store-Windows-10-GP-3-0-2/td-p/109438), and I have the same problem in my infraestructure; but no only with Windows Store, also with Kindle application for Windows 10. The problem is that applications (Windows Store, Kindle) are...
Hi team, I want to block .pst .dat .csr files.I know the PA FW works on file types rather than file extension, but i want to know .pst and .dat and .csr are which file types ?
Hello team, Can we add multiple firewalls to same device group? We have one requirement where all the security and NAT polices are same for each firewall instance. So we are looking into something where there will be common device group polices, and All firewall instance will be attached to this common DG. I was looking for some articles but did...
Hi Can any one explain the difference between the ip poolsa) Global protect / gateways ... external gateway / agent / Client ip poolvsb) Global protect / gateways ... external gateway / agent / client setting / ip pool so fora) I can't reference an object .. thats annoyingb) I get the pool is just for that setup, I do like having 1 pool of the...
I have a client that is currently using Sonicwall and wants to migrate to Palo Alto. Sonicwall supports Transparent IP Mode (Splice L3 Subnet) that basically can bridge the WAN subnet onto the DMZ interface.Let say for example,WAN Interface - 100.100.100.1/24 - L3DMZ Interface - 100.100.100.1/24 - TransparentLAN Interface - 10.10.10.1/24 - L3T...
Hi, Anyone has ever figured out how to block any inside hosts to upload any kind of file outside, but still allowing web browsing? The file blocking option support only specific type of files... and the APP-ID database doesn't have any king of basic http or https upload APP-ID. I know it's not the better protection to configure but I'm trying t...
Hello all,We have two users across the pond that have an issue with their client attempting to start and then repeatedly starting multiple instances (task bar will show several GP icons as they come and go). We did a deep-clean, reinstalled fresh, different versions - same behavior continues. We have over 500 clients connected without issues an...
Under traffic logs we are seeing communication is being allowed through an access rule which does not have a match for destination server. There is security profile attached to the rule. Can someone please explain this behavior of PA.
Hello, I have an issue with PA-5220 FAN the LED indicator is red. when I check the system environmental logs below is the result:- Do I need to change the FAN or any troubleshooting steps for this?
Hi All, I come from a Cisco background and now getting to play with PAs 🙂 I have a few queries around debugging from CLI. Can we debug multiple different protocols at the same time, e.g Phase 1, 2 for VPNs, maybe some ARP resolution at the same time?Can we get this debug output to the CLI in real time? (if not, how can I view the output).How c...
Getting alerts for eu.wildfire.paloaltonetworks.com having an expired SSL certificate Looks like it is a wildcard for *.wildfire.paloaltonetworks.com from Godaddy, can someone in support replace it?
Hi,I'm having a challenge with GlobalProtect when trying to do ldap authentication with a machine cert (from internal MS pki). I've tried both the computer and workstation authentication template, but neither worked. GlobalProtect states certificate is missing. I'm not doing pre-logon, I have GP set to always on. In GP portal app setting, ...
Does all the partitions showing below has self cleaning Capabilities or there is a need to manually clear those files like for eg I know old downloaded software can be deleted to free some space from panrepo partition? Filesystem Size Used Avail Use% Mounted on/dev/sda3 16G 5.7G 8.7G 40% //dev/sda5 16G 2.2G 13G 16% /opt/pancfg/dev/sda6 12G 5.0G...
Hello team, We have around 10 HA cluster managed through Panorama. now we need to detach/remove one HA cluster from it. Please guide me on the steps to be followed without creating any impact on production. Also please confirm if it need downtime.
