PBF Rule not being hit

I am experiencing an issue with one of our PAN devices, which is a PA-500 running OS 7.0.19. I have created a new PBF rule to forward traffic from a certain subnet to the inside interface of our edge router. I have several other rules pointing other

Global protect to restrict certain source IP

Can Global protect restrict or only allow certain external public IPs from accessing the VPN? 

Unable to add virtual disk to Panorama

Hello,

We are running Panorama VM release 8.1.8 un Panorama mode.

We have a 2 TB disk for logging and we would like to add a second 2 TB disk.

The new virtual disk has been added to the VM, and after reboot is seen as sdb in Panorama (sdc is already wo

GlobalProtect VPN - restrict which devices can VPN?

Is there a way to prevent employees' personal computers (not issued by company) from connecting to VPN? If so is there a license for this and where do you configure the settings? 

Website getting blocked

Hi Team

We have PA 220 firewall with 8.1.5 PAN os version.

We have tried to reach one particular website but its not reachable. When we checked the traffic logs that application was shown as "incomplete" and the end session reason was aged-out.

Note

Palo Alto Firewall Packet Capture on drop state

Hi Team, I have an issue in production for SMTP traffic, when i do packet capture in Firewall for drop state, could see packet are getting dropped in syn packet

Co-related Events Logs Gathering

Hi,

How can we gather the Beacon Detection logs for Co-relation logs in our Syslog Server.

Regrads

Karthikeyan Balamurugan

Display SSL/TLS version in traffic logs (app coloum), instead of just (ssl)?

Hi 

is there a way to display SSL/TLS version in traffic logs (app coloum), instead of just (ssl)? i have worked on another firewall vendors it's too easy to deteremin SSL/TLS version for troubleshooting instead of packet capture for many many custom

How to upgrade a Panorama server from 7.1.x to 8.1.x

Hi,

How to upgrade a Panorama server from 7.1.x to 8.1.x. Also, I heard about the log migration after upgrading to 8.0. So what should be the procedure to follow for this upgrade. 

ipsec site to site vpn

Hi,

Do I need a tunnel interface for site to site vpn ? 

If yes How can I do that and what is the benefit 

Thanks 

firewall using wrong LDAP attribute to find user in active directory

Hello Community,

I´d like to check with you the following issue:

created a LDAP authentication profile which is not working, when using the "test.... " command I get an authentication failed with "Received empty DN for user User12345"

I made a traffic

Orange attack on GP

https://blog.orange.tw/2019/07/attacking-ssl-vpn-part-1-preauth-rce-on-palo-alto.html?m=1

Any word from PA on this ?