I have 4 public IP addresses that are needed to NAT to a one single private IP server in DMZ. They all listen on same port and same application. Anyway I can get this done without greatly impacting users? Thanks.
I am trying to find the correct configuration to prevent or exclude globalprotect logs from forwarding to our SIEM. I have filtered the type of event "globalprotect" but dont seem to be able to configure this as a filter in my log forwarding on my appliance. The above log entry is from "System" but this is not listed as a log type to choose fro...
Hi all , Has anyone accomplished to authenticate external users 1st with AD through LDAP profile and then SMS through radius to another server ? I guess 1st authentication will done in the portal and SMS auth profile can be added on the gateway ?
On my PA 9.1.0 firewall, Ive created a custom URL category 'Akamai' with a url list comprising *.deploy.static.akamaitechnologies.comIn my security policy i have a rule allowing any source (trust zone) to reach any destination (untrust zone) via any protocol and any application. The rule specifies 'Akamai' under the Services/URL category. log an...
I've got a PA-200 at home with a Huawei B525-23a router set to "bridge mode" with an EE data sim installed (no broadband where I live) The outside interface is set to DHCP and gets an IP address but no clients on the inside can resolve DNS. I can see the logs showing that DNS requests have 'aged-out' but think that's expected for UDP DNS queries...
Hi, Is there any way to take a pcap in plain text about a VPN-SSL connection?
I went to see total internet bandwidth. I have already apply QOS. But I went to see on 3rd party tool. Suggest how can i achieve this requirement.
Have yet to see an answer to the 10022 error message. Here is my log. Can anyone help. I have contacted support staff at UW Madison and they sent something to paloalto. I thought I might get a quick response from this group. I may be working from home soon. (T8800) 03/14/20 22:19:52:716 Info ( 246): InitWinConnection ...(T8800) 03/14/20 22:19:5...
Simply trying to re-install the GlobalProtect version above. The .msi runs to completion and indicates a successful install, but it's not functioning afterward. The message in the title is from the PanGPS.log. We've been through several iterations of de-install, reboots, registry cleans, etc. Yes, we have administrative rights. No joy after...
I am on 9.1 and cannot determine which setting under Portal/Agent/Apps is the overall VPN session timeout. Any help would be appreciated.
My customer has a PA-3020 setup for GP. Now they want their branch PA-500 enabled for GP as well, so users can connect direct for access to the branch resources. I cannot find any spec's about the usage limit for GP on a PA-500.Anyone has a ballpark what to expect? 20, 50 or 100 users? Thanks all!
I am working on a network segmentation project for our organization. We currently run Cisco switches and all devices reside on the default VLAN, VLAN 1. All routing is currently done on our PA-850. On the PA-850, I have configured the new VLAN's as sub-interfaces and all switches for layer 2. If I put a PC on any VLAN and set a static IP address...
Hi, We are trying to setup always on + Pre-Login with Machine cert which generated by Microsoft PKI and distributed by GPO when user turned on the machine . Then, when user login to the machine, it will use windows logon with SSO. Like this KB. https://docs.paloaltonetworks.com/globalprotect/9-0/globalprotect-admin/globalprotect-quick-configs/r...
Hi, I'm using Panorama 8.1.13 to manage 60 or so firewalls. Mostly PA-220s with a few PA-5220. These firewalls are in a number of templated device groups. Both Panoramas are M100 appliances. The Managed Devices are correct on the primary Pano. The Device Names and Serial Numbers are correct, and they are in the correct device groups.My problem i...
Hi, We have two GP gateways configured in our PA. We realised that the passive PA unit, we can see "remote users" connected. Why is this? It shouldnt be asumme all GP user sessions in the active unit? On the another hand, what is the OID (SNMP) to get tha value total users connected per GW? is that possible?
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
reaper
on:
Server monitering -Connection refused
