Is there a signature yet for CVE-2020-0688? https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688
I'm using PA-3220 firewall.Ethernet 1/1,1/2,1/3,1/4 is connected to main switch, Cisco AP, Internal router and server 10Gb switch. I setup a GlobalProtect internal gateway for using User-ID and used vlan 1 (192.168.1.2) as the gateway and Portal's IP. When I used GlobalProtect to connect the Portal (192.168.1.2), it shows “Connection Failed – Pl...
Fellow Engineers - Wondering if there is a way to integrate User-ID with Google Apps, such that a school that has deployed Chromebooks can use the students' existing Google login IDs to identify the users on the Chromebooks. Does anyone know if this is possible, and if so, how to enable it? Thanks!
Hi All, I have successfully tested Authentication policy using LDAP, MFA (Okta API), SAML and RADIUS (Okta). I am working on the redundancy scenarios wherein if Okta fails, the fallback would be LDAP. I am using RADIUS (Okta) and LDAP in the Authentication Sequence. I am however unable to get the LDAP (Active Directory) fallback working. I am si...
Has anyone tried to get a userid authentication from users with Chromebooks? We are evaluating Chromebooks to be used in a laptop cart setting in our school. I don't want to fall back to a portal login if there is any way I can get a current user off the chromebook via the chromebook/google apps login session they will be using.If it helps, I ...
Can we configure shared gateway on a VLAN or subinterface? And HOW that vlan / subinterface can be used for Internet connectivity from different VSYSs? Please share the supporting urls for the same as well.
Hello all, I try to set up alert mail to prevent when my PA220 detects an threat (inboud attack for example). I configured scheduled PDF reports (daily and weekly) but I want also be informed instantly when a threat is detecting ? It is possible ? Thank you in advance for your help.
We are having some issues regarding the port redirection when combined with third party program. This program brings up a TCP listening port that TS Agent redirect to the designated port in the default range (20000-39999) but the program doesn't notice this redirection and keeps trying to stablish the connection on the non-redirected port (i.e:...
Hi community, I have followed this instruction https://live.paloaltonetworks.com/t5/MineMeld-Articles/Manually-Install-MineMeld-on-Ubuntu-16-04/ta-p/253336 to install MineMeld on the Ubuntu 16.04 server. All steps are good except the last step Checking if MineMeld running. I did the command and got the message$ sudo -u minemeld /opt/minemeld/en...
I am seeing a pattern where I observe an http_category in my pan:traffic logs where log_subtype=end but there is no dest_hostname or URL. Is it possible that Palo is classifying based on IP address? We are not decrypting SSL traffic in this instance and I see no other corresponding logs for the same traffic (pan:threat).
Hi All, We have few virtual Panoramas running 8.1 that are needs to managed firewalls into two different zones with no connection between them. For that reason we have configured the Panorama with multiple interface.- The mgmt interface in used for access to the Panorama as well as managing some if the firewalls- Eth1/1 interface is used for man...
Ubuntu server LTS 16.04 running on VMWare Workstation Pro 15 After running the repository command: sudo add-apt-repository "deb http://minemeld-updates.panw.io/ubuntu xenial-minemeld main" When I run the update: sudo apt update I get the following and am unable to proceed as everything after this will fail as well. *****@ubuntu:/etc/apt$ s...
Hello, Is there any way to block Linkedin video?
We can configure an email server profile with domain name/server IP. there we can not provide username and password for SMTP Authentication. We wouldn’t see any Username and Password in Email server Profile.Is it possible to configure Username and Password in Email server Profile?
Recently, I am getting "Failed to check content upgrade info due to generic communication error. Please try again later" error message.Do you have any idea about the problem? I faced with this problem at two different PoC.Thanks.-Ismail
PavelK
on:
Throttling ingress bandwidth on a sub-interface
