Management interface generating unnecessary traffic on WMI Port... what could be reason?? Appliance: PA-5020PAN-OS:8.1.11
Hi,We have 400/400 up and down mbps connection, your ISP does not shape the traffic and have asked us to shape it.Applying qos on the outside interface both ways, how would we achieve it? if I only set the egress then i am only setting the speed for outbound traffic not inbound. Also if I do QOS rules is this going to also QOS the Palo Alto VPN ...
Hi Guys,I am just wondering if the following scenario is possible Load balancing between the two client VPN Gateways so half the clients connect to one VPN server at site A, and the other half connect to Site B.Palo alto firewalls on both sides.
Hi I am trying to setup a minemeld server (docker image https://hub.docker.com/r/jtschichold/minemeld/ ) behind a Nginx reverse proxy. This however is to be hosted on a subpath, however I cant seem to get the authentication to work (This all works correctly is i don't use a subpath). In other apps, I have the option to set teh app base path etc....
the following search string ( app eq dns ) and ( port.dst eq 53 ) and ( addr.dst in 8.8.8.8 )searches and displays all dns traffic using port 53 that has the destination ip of 8.8.8.8I would like to know if I can look at all dns traffic traveling on port 53 except the traffic going to 8.8.8.8
Hey Team, I am trying to setup GlobalProtect VPN on mobile devices (both IOS and Android). The requirement is to use client certificate authentication for the connectivity.The client Certificate are deployed to mobile devices via Microsoft Intune, While testing, I noticed if I connect to the portal address in the browser, the authentication is s...
Hello all, I am planning to migrate our two checkpoint HA clusters (Active-Standby) with Palo Alto with the help of Migration tool. I never used migration tool ever. Can someone brief me steps to be followed for successful migration?
Is there any supported way to have Global Protect installed on an Apple TV?
Dear all,lost access to the WebGUI.opaque: websrvr: Exited 4 times, waiting 1770 seconds to retry Before that I received another email from the firewall:opaque: Shared certificate xxx and corresponding key have expired.(OK, I know, my fault) So I suspect that this is the reason for the web server failing. All instructions I found so far talk abo...
PA-5020, sitting on 8.0.4.From time to time MP load increases rapadily due to appweb3 process going above 300%. Looking like this: There is no direct correlation found between the spikes and actions taken within the GUI. Spike may go on for a while - 20 minutes, 2 hours, 5 hours, etc. During that time GUI is still usable and everything is operat...
I would like to understand bandwidth limitation steps on Internet download and upload Example - lets say i want to restrict steaming url category on download and upload 1. create QOS policy to map traffic going to inside to Internet youtube as Class 8 with DSCP marking2. Create QOS Profile with class 8 to egress max/guaranteed3. Apply QOS Inte...
After Forward Trust certificate is renewed is there a way to validate the renewed certificate is working correctly from either GUI or CLI?Device > Certificate Management > Certificates > Forward UNTrust Certificate
Hi all, Is there a quick way to script / create 50+ nodes on a PA Firewall (azure based)? Cheers.D
Hi all, I've deployed a GlobalProtect installation solely for the purpose of User-ID. The GP agent connects to the internal portal/GW (one box) upon login with Kerberos SSO. However, when the internal gateway is not reachable (user has no network, user isn't on-prem), the GlobalProtect Agent notifies the user about this (no network / can't reach...
Hello Community, i'm currently planing a project which should be able to control the VPN user access via the API.It should be a simple tool where you just need to click a single button. The tool then activates or deactivates the user for that VPN via the API.How do i activate/deactivate local user on the PA with the API?I've already searched thr...
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
reaper
on:
Server monitering -Connection refused
