Hi can somebody tell me the difference between youtube-baseyoutube-streaming will later only ever be there video stream. Looking to add it to GP thanks
Hi Team, We need to capture new VPN administrator creation at our LogRhythm SIEM end. We wanted to know in which log will we get that information. For Example, for login and logout we get logs in the below ones:GlobalProtect gateway user login succeeded.GlobalProtect gateway user logout succeeded. Please help with the log pattern for "new VPN ad...
Is there a support page somewhere where you can obtain the various global protect packages outside of setting up a gateway? I'm looking to see how we could download specific versions to evaluate them before we activate them on the firewall. When I search Palo documentation there isn't a site where you can download those packages.
Good Afternoon Everyone, This may be somewhere else so if i'm asking something that has already been asked, please point me to it. I am trying to set up a new vpn tunnel on a public IP from my block assigned by my ISP. I only have one interface going straight to my ISP but extra public IPs. how would i go about using the other Public IP and go t...
Hi, we have a user who spends a lot of time in China, but is having major problems getting GlobalProtect working while there. Does anyone else have any experience running GlobalProtect out of China (to Norway, in our case), either positive or negative? We're seeing tunnels sometimes going down for no apparent reasons, "Failed to connect to re...
Hi,, Even after i configured to "Retrieve Framed-IP-Address attribute from authentication server" Why am i still getting IP pool range commit failure ?? Please find below screenshots. Commit ErrorConfig Setting
Hi, we have to add SNMP profile traps config to cluster PA. This cluster is managed by panorama and have the most of the config done in panorama. So we are thinking to add this snmp traps new config directly in the FW, so it would any issue is we apply a commit in the fws for not using panorama? .we are afraid to overwrite panorama config
Hi, sometimes you have set cli config that you want to paste in CLI mode but in some occasions order of the commands is not correct. For example something like below. For the followingto work address object must be above the group otherwise you will get reference error. In Juniper you can just past them as CLI doesn't do the entire check during...
We are doing SSL decryption in another Vsys for the traffic published over the internet based on SSL. We need to know if the high utilization is due to that SSL decryption happening in another Vsys ? as we are planning to move this SSL decryption setup from palo alto to another firewall, will it help to reduce the overall utilization on firewall?
Hi Team, May I know, what users limit in Palo Alto PA-220, Currently VPN connection is maximum 21 (from 10.0.0.100 – 10.0.0.120). But now, users request need more SSL VPN users. What need to do is buy a license or what.? Thanks
how to block hashes in firewall .
I have new application.I need to know what is the difference between application override policy and the security policy by using the service port number both are stateful inspection firewall at Layer-4? Service:Allows you to select a Layer 4 (TCP or UDP) port for the application. You can choose any, specify a port, or use application-default to...
We have Palo Alto firewalls, version 8.1.x. We heavily use Webex (application and physical boards), Jabber, and MS Teams both in the Corporate office and by GlobalProtect VPN users. I'm considering using Application Override for many of these Voice and Video applications, especially I see a large amount of cisco-spark-audio-video App-ID traffic ...
Hi, I am using the 5.x version of paloalto.HA is Actvie(FW1) - Passive(FW2) configuration and use link group.For example, failover occurs when the wan link goes down. (FW2 / Actvie)When the wan link is up rollback.(FW1/ Actvie) At that time, the entire physical link down fw2 was about 1 minute.I was using it this way.but I am working on changin...
Hello, We have 100 Palo altos firewall that we would like to upgrade via Panorama to 9.0.7, I am trying to create a group based on the prisority of upgrade to push the device>deployment >software package. Is there a way from Panorama 9.0.7 to create a groups a populate the firewall we want to upgrade? instead of selecting each one individu...
Raido_Rattameis
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
