Please help me. Any ideas on how to add multiple portal in globalprotect via GPO Thanks in advanceRem
hello,i have a setup like the image below.my goal is to allow internet throught interfaces 3 and 4 (i have a virtual router with these 2 interfaces, vr_l3) : this is workingi have an IPSEC tunnel on interface 1 (with another virtual router, vr1) to route 172.22.0.0/20 : this is workingi have a dhcp server on interface 3 if i put a route directly...
Hi, 9.0.6 was released on 1/27/2020 and 8.1.13 was released on 2/6/2020. While comparing addressed issues between the release notes, Many issued ids resolved in 8.1.13 are not listed in 9.0.6. Just a few examples, PAN-134678(PA-5200 Series firewalls only) Fixed an issue where the Quad Small Form-factor Pluggable (QSFP) 28 ports 21 and 22 did...
has anyone used the dymanic address group objects in google cloud pan? is it supposed to pull all metadeta e.g. labels by itself. i am not seeing anything populated once i click the "Add March Criteria" button
Hello, Whenever I export security rules or NAT rules from the firewall in PDF/CSV format, the file is not properly displayed my software version is 9.0.4example:-
Hi we have used minemeld for some monthes and i figured out that i want to tighten the security even more.The question that then arose was the posibility to generate an api key or an user based authentication for my output indicators I don't know or think it matters but we run minemeld in two datacenters with mirroring and global loadbalancing.T...
We had an issue on our ESXi server and in looking through the logs found a large number of "Invalid Opcode" log messages related to the Panorama VM and Next Gen FW VM trying to access features of the VSCSIFs made available by VMware 6.0. These do not appear to affect the performance of either product, but it does indicate a disconnect between Pa...
Hi all,I have setup MineMeld on a VM and it seems to be working correctly but, when I setup the EDL on a PAN firewall and test it, I get a "URL access error" message on the firewallI have generated CA from Palo alto and i have created a certificate signed by this CA (with CN same of minemeld's hostename).After that, I have uploaded the certifica...
Hi Team, We require to download the Global protect VPN client updates on our repository. So that users can direct update their existing Global Protect Client VPN software when connected to LAN network.Is there any way of downloading these updated version files from the firewall & sharing it across.
Our client has noticed their Panorama VM becomes occasionally unresponsive after upgrade from 8.1.3 to 9.0.6. Has anyone experienced this issue? Is there a known bug?
I have a Policy Based Forwarding related question. If we have a PBF rule, with Monitoring enabled, and the "disable this rule if next-hop/monitor ip is unreachable" also enabled. So Palo Alto sends ICMPs to the monitored IP address out of the egress interface defined on the same page. However, what is the source-ip of these ICMP requests? Is it ...
HiHow to configure palo alto and prtg for monitoring physical interface status(down/up) ?
Hi folks, Is there a way to block the entire sub-domains but to allow a particular sub-domain and its related subs ?? For Ex:Domain : *.cloudinary.com/* ( Which covers *.Cloudinary.com/blog/* , *.Cloudinary.com/about/* , *.Cloudinary.com/contact/* ) To block: ( *.Cloudinary.com/about/* , *.Cloudinary.com/contact/* )To Allow: *....
I am thinking to put a small pan between an Internet connected Cisco 4331 ISR and a Meraki switch. Will the PAN just pass all the tagged frames along and will the PAN be able to process the traffic from all those VLANs/tagged frames? Or would I need to configure VLANs on the PAN? [Cisco ISR 4331]-Int Gi0/0 0/0.1 0/0.2 0/0/3------[L2 PAN]-------...
Hello, We are using PAN-OS 8.0.0 and GP agent version 4.0.2 We cannot set any IP address for the Gateway. If we try then it auto changes to 'None'.The output from the show global-protect-gateway gateway command shows there are two gateways.But according to the WEB GUI, there is only one. show global-protect-gateway gateway GlobalProtect Gateway:...
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
