We have around 1,000 whitelist URLs in Palo Alto. How can we audit these URLs and determine which ones are active
Hi all Asking this again on general topic in a hope I could get a definitely answer... Can we completely disable email as an option completely for PAN SSO? Thanks Tum
Hi All, New to PA firewalls and have an old EOL PA-200 running PanOS5.0.6 I would like to upgrade to 8.1.26 but every upgrade attempt fails from the GUI or CLI I downloaded PanOS 6.0.0 and 6.0.15 but it also fails requiring content version 401 or higher <-- no idea what that means What am I missing at this point? Is there a way to sim...
Just wanted to share in case others run into this. My company has recently started to use Microsoft's SSPR process which is embedded into the Windows 10/11 OS. Specifics on how it works here: Self-service password reset for Windows devices - Microsoft Entra ID | Microsoft Learn This specific section is going to be an issue for GP VPN envir...
Hi Everyone,I have a inbound rule in place fro my forward facing web-server and am tightning the policy down to only allow a few apps and a few default ports ssl and web-browsing When i was looking at what traffic was hitting the rule, Isaw the following applications SSL 443 = iexpectedweb-browsing (80) =expected however i am noticing http-proxy...
Hi, Is there anyway to filter the policies by zone? or other parameters? Is there any guide about this? Thanks a lot.
I've been doing mixes of internal and external gateways with customer forever (I usually forget that "always-on" must be enabled for internal gateway detection to even be allowed in the first place). I'm working on a pre-logon implementation that also would benefit from leveraging internal gateways/no-tunnel while inside the enterprise network...
Greetings all, I hope you can help me. I currently have Globalprotect set up on a single firewall - both portal and gateway. We're using Radius for authentication, it is working well. We want to transition to SAML. For testing purposes, we'd like to have SAML configured for a specific test user (or group), while leaving the current authentic...
Problem: Because of occasional issues with vendor patches, like MS had early this year, (see URL below), very few companies release patches/updates to clients or servers on the day of release. They test the updates first, then release them days or even weeks later after testing has shown no major issues. GlobalProtect has no capability to delay ...
Hi, a site I am working on with a client is being flagged as Grayware. This is a landing page for a digital agency product and shouldn't be flagged. Can this be reclassified? This is the domain: https://audiencexlerator.com/ Thanks in advance, Matt
tl;dr use the command "cu" instead of "screen". I have been trying to factory reset a PA-3200 for about 45 minutes. I am using a standard RJ-45 to DB9 serial cable with a USB serial adapter. Following the instructions I get to the step where I have to select the factory reset and it says "maintenance reason". Hitting "q" to go back a screen...
Hello everybody, How many policy we need for block and review source of infected hosts? One or two? Internal dns is using but we can not see source of users.
All our 10 devices throws there errors (medium severity) since Thursday. TAC has no response for this. Anyone?
Hi all, A colleague of mine asked if it was possible to search for specific URLs or IP addresses in PAN hosted EDLs, to help figure out which EDLs they might be part of, which i found out it's not. It's pretty tedious to go through all the EDLs at https://docs.paloaltonetworks.com/resources/edl-hosting-service, so i decided to add this feature...
We selected the paid PA-VM subscription that includes the 15 day free trial. It looks like it won't be fully licensed until the end of the 15 day trial period. Can we skip that and enable now to get access to the support portal and wildfire api key?
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
