When i renew the self signed certificate i got the error. i have restart the management plane but issue still same.I have all renew from CLI but issue still same. Please suggest me
Hello team, We are sending all the traffic logs to our inhouse syslog servers. So whatever traffic is matching current security policies, all such traffic logs are forwarded to syslog server. Now in those logs, i am seeing everything like Source, Destination, port everything. Now our requirement, we need to send only specific logs to syslog for ...
My company recently set up GlobalProtect to have us work from home. It works for everyone but myself. When I installed the app, it installed through the Microsoft App Store. When I try to run GlobalProtect, all it does is open a popup window with a link that opens my windows vpn settings. In other words, GlobalProtect doesn't actually run or do ...
Hi can somebody tell me the difference between youtube-baseyoutube-streaming will later only ever be there video stream. Looking to add it to GP thanks
Hi Team, We need to capture new VPN administrator creation at our LogRhythm SIEM end. We wanted to know in which log will we get that information. For Example, for login and logout we get logs in the below ones:GlobalProtect gateway user login succeeded.GlobalProtect gateway user logout succeeded. Please help with the log pattern for "new VPN ad...
Is there a support page somewhere where you can obtain the various global protect packages outside of setting up a gateway? I'm looking to see how we could download specific versions to evaluate them before we activate them on the firewall. When I search Palo documentation there isn't a site where you can download those packages.
Good Afternoon Everyone, This may be somewhere else so if i'm asking something that has already been asked, please point me to it. I am trying to set up a new vpn tunnel on a public IP from my block assigned by my ISP. I only have one interface going straight to my ISP but extra public IPs. how would i go about using the other Public IP and go t...
Hi, we have a user who spends a lot of time in China, but is having major problems getting GlobalProtect working while there. Does anyone else have any experience running GlobalProtect out of China (to Norway, in our case), either positive or negative? We're seeing tunnels sometimes going down for no apparent reasons, "Failed to connect to re...
Hi,, Even after i configured to "Retrieve Framed-IP-Address attribute from authentication server" Why am i still getting IP pool range commit failure ?? Please find below screenshots. Commit ErrorConfig Setting
Hi, we have to add SNMP profile traps config to cluster PA. This cluster is managed by panorama and have the most of the config done in panorama. So we are thinking to add this snmp traps new config directly in the FW, so it would any issue is we apply a commit in the fws for not using panorama? .we are afraid to overwrite panorama config
Hi, sometimes you have set cli config that you want to paste in CLI mode but in some occasions order of the commands is not correct. For example something like below. For the followingto work address object must be above the group otherwise you will get reference error. In Juniper you can just past them as CLI doesn't do the entire check during...
We are doing SSL decryption in another Vsys for the traffic published over the internet based on SSL. We need to know if the high utilization is due to that SSL decryption happening in another Vsys ? as we are planning to move this SSL decryption setup from palo alto to another firewall, will it help to reduce the overall utilization on firewall?
Hi Team, May I know, what users limit in Palo Alto PA-220, Currently VPN connection is maximum 21 (from 10.0.0.100 – 10.0.0.120). But now, users request need more SSL VPN users. What need to do is buy a license or what.? Thanks
how to block hashes in firewall .
I have new application.I need to know what is the difference between application override policy and the security policy by using the service port number both are stateful inspection firewall at Layer-4? Service:Allows you to select a Layer 4 (TCP or UDP) port for the application. You can choose any, specify a port, or use application-default to...
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
reaper
on:
Server monitering -Connection refused
PavelK
on:
Commit Failed
