Hi Team, Can anyone tell that in what situation both firewalls become active in Active- Passive setup of HA? Thanks in advance!!
We need help in configuring the Email notification on Palo alto devices, in case of disk full.
We are using PA-850. We are constantly getting alert: Error for user group count exceeds 1000 threshold. We understand the error is due to hardware limitation of the PA model and it is restricted to 1,000 AD groups. We would like to know how to use filtering or search scope so the Palo Alto device is no looking at the entire AD.
I am applying URL Filtering but I notice that with chronium type browsers it applies the blocking, making tests I see that the filters are not being applied when you surf with Firefox.You can even enter XXX pages.What's wrong?I am bringing user groups from AD.
Hi, We have a VPN between PA and cisco router. THE VPN is UP but we are having a strange behaviour with Phase1 lifetime.WHen the lifetime phase1 expired (24hour), the phase1 goes down in CISCO side, and we need to renegotiate pahse1 in order to get up again. These are the events: 2020-03-02 12:05:13 [INFO]: ====> PHASE-1 SA LIFETIME EXPIRED &...
Greetings all, This morning I moved our GlobalProtect from a 4.0.x release to 5.0.7. We're planning on a maintenance tonight to upgrade our firewalls to 9.0.6 and I noticed that there is a minimum supported GlobalProtect version of 4.1 for the 9.0 platform. If I upgrade the firewalls tonight and there are users who still have the older 4.0.x Glo...
Hello, Looking for some help if possible? Trying to set up XFF (PA-3250, 8.1.12), I have tried to set it up following this tutorial:https://live.paloaltonetworks.com/t5/General-Topics/Configuring-XFF-logging-without-a-URL-Filtering-License/td-p/239987 The only part I have not configured is pushing the URL logs to the syslog server.The problem is...
I need the process of how to remove the hard drive from a PAN 3220 since I cannot enter maintenance mode and before doing the RMA for the firewall, I must clean the disk
Hi,I would like to backup and restore a panorama like I can with the firewall, on the firewall i set "set cli op-command-xml-output on" and get the config via the console, then bootstrap the firewall to restore the config...now i am wondering how I can do the same with panorama...it seems that i can neither set operational output to xml, nor res...
Hi,My colleague and myself are complete Palo newbies so apologies as this is probably covered elsewhere but I don't know what to search for as I've never seen a firewall do this. We bought a PA-220 for evaluation intending to possibly move away from Cisco.My colleague configured it in a basic way and the box has completely disrupted the test su...
I found this article "https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClikCAC&lang=en_US"Apparently they took the "Overrides" tab off and I don't know where to look.
I recently implemented a policy that allows certain users who belong to a group in my Active Directory to go online. It seems to work well but after a while users report not being able to browse even if the LAN connection is maintained. The funny thing is that if you reboot the PC or simply block and unblock using the AD account the permissions ...
I've sucesfully connected FW 8.1.x to Data lake but am having issues connecting one on 9.0.1. Both are managed by the same Panorama (PAN-OS 9.0.1). The difference is that on non-working one I have disabled Panorma Policy and Objects. But logging service setting is under template setting anyway. License seems to be ok. First error says "No cer...
Hi. Can anyone tell me if they have had any sucess using the DDNS feature in PAN OS v 9.0 when using a PPPoE connection.The only option I have is DHCP and this throws an error when commiting the rule base to the firewall, looking at the runtime stats there is no ip information. /M
I have a firewall PA 3220 to send by RMA to Palo ALto , but first, the client wants to make sure that he has no sensitive information inside, can someone tell me if this is the case or what should be done for the return of the equipment without exposing sensitive customer information?
PavelK
on:
Replacement of RMA
