As Paloalto 3200 series has limitation of 250 scheduled policy How we can over come this limitation ?
I am starting to build a clientless vpn setup, but I am getting errors when building a DNS Proxy and DNS Server Profile. I get this error msg. I tried ethernet, tunnels and loopback interfaces and they all failed. I tried following the instructions but i get the same error message. Does it matter if use the a loopback or tunnel interface? all of...
How are you identifying Apple Mac devices/making sure they are part of your organization before letting them connect through Global Protect? We have an MDM - that joins our MACs, but the User ID-MDM integration is proving to be a bit more difficult than I had plannned. Are most of you using a certificate that is exported to a machine, and or...
Anyone experience any issues with 2FA timing out occasionally. For example, we have a weird situation where the 2FA integrated with DUO is working fine but after a week or two suddenly all users stop getting the push notification. Looking at the PAN logs, we see a discarded session and as soon as we clear that up, everything starts to work norma...
Hi paloalto community, I tested my new ssl decryption rules against the badssl dashboard ( https://badssl.com/dashboard/ ).So far it looks good. Unfortunately the check for sha1-intermediate doesn’t pass. Our PA-850 (Firmware 9.0.5) does create a secure connection to this site for the client ( https://sha1-intermediate.badssl.com/ ), even I conf...
I would like to block malware files. On my gateway firewall, what filetypes should I block? . If I block only exe/DLL files getting dowloaded, will it help to avoid final malware getting executed ? What I would like to understand is, even if I allow communication with Command and Control (C2) servers, if I block executable/dll files, will it re...
Hi Experts,I am always in doubt when someone asks how much PA 220 can support as far as throughput is concerned.In datasheet there are 2 throughput , firewall throughput ( 560 Mbps) and threat prevention throughput ( 260mbps).Customer has line of 2 active links 80mbps each ( 80*2 =160 ). Someone please explain what is exactly threat prevention ...
Hi All,Is it possible to integrate google authenticator with PaloAlto for device admin authentication (two factor)?If possible, how to accomplish the same. Share if any document is available.Thank you,Guru
Is it just me or is Palo Alto Phone support going down hill. It use to be when you called within 15 min you had a tech but over the last 2 years its getting worst to get a human on the phone and opening a ticket online is no better. I opened a ticket as a Sev 2 and got a is this issue resolved request from the tech with 0 Troubleshooting from th...
Ok, Palo Gurus - I'm fairly new to the platform, but learning as quickly as I can. As best I can tell, although Palo maintains lists of IP ranges associated with countries - "Regions" (Great!), these can only be referenced in security policies (Stupid.) I tried referencing Regions both in the Static routing section of the Virtual Router (nope) ...
We upgraded the firewall to v9.0.4 from 8.1.11h2 this weekend and came in to our hosted exchange / outlook profiles failing to load. I added the mail host server in the do not decrypt policy and a percentage of the users reported services normal. It was not until I disabled decryption completely until the entire network started working consisten...
I find this document below hard to follow or understand. Can someone explain it to me in simpler terms? For example, suppose I have the following zones already: Trust, Untrust, VPN. What would this map to in SDWAN? What is zone-internal? Is that Trust? Where exactly is that used by SDWAN? https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin...
Hi, I'm installing Global Protect on multiple windows devices that they are sharing the same username and password to authenticate with Global Protect.I'm trying to configure Global Protect client to add username and password to authenticate during the silent installation. Which means to add the username and password with command after or during...
Hi, I have a question related to Wildfire: We need wildfire statistics during the year 2019, inspected files, files with malware, files with grayware and files with pishing. Is there any way to collect this info? from PA or wildfire web? I can not find it 😞
Hi everybody, we are quite often have a problem with logging to Data Lake. Mostly Data Lake certificate expires and is not being renew automatically, so logs are not being forwarded to Data Lake and XDR doesn't have info. Is there a way, how to monitor certificate status, or dropped logs counters using snmp? (it is drop counter in command debug...
PavelK
on:
Throttling ingress bandwidth on a sub-interface
