PA HA timers : Preemption Hold Time vs Promotion Hold Time

Hi!

What are the difference between in the Preemption Hold time and Promotion Hold time?

Dates of dynamic updates only in Panorama, not firewall

Under General Information in Panorama, both the version numbers and dates for the installed dynamic updates are listed like this:

Application Version 8172-5560 (07/17/19)
Antivirus Version 3042-3552 (07/17/19)
WildFire Version 367098-369809 (07/17/19)

Prototype for FS-ISAC

I understand that Soltra is part of the existing 3rd party intelligence feed, just wondering has anyone created a prototype from FS-ISAC? THe portal address is https://portal.fsisac.com/

Understand from FS-ISAC, they uses Soltra as part of their in

# of rules vs simplicity

Hi all,

I'm currently reviewing our PA5250 security policy ruleset and I'm doubting the best way to handle it. We have about 800 rules and lots of those rules combine functions. For example a server is allowed to FTP to ip a.b.c.d and should be allow

How to write a script for backup of initial settings of Palo alto firewall

Hello everyone,

Please help me in writing a script for backup of initial settings of Palo alto firewall.

I am new in network security, requesting you to help me.

Br//

Ashutosh

BlueKeep HIP policy

I've created a HIP policy to filter GP users if they are missing the security patches for BlueKeep. However, with monthly roll-ups I have to go in and generate a new HIP object each month. 

We currently patch our Windows machines 30 days behind Micro

advertising a default-route to a single eBGP peer in the Palo Alto.

Folks,

we want to work on some specific BGP advertisements. Our aim is to propagate the deault-route to only on specific eBGP peer.

So far what we have already done is configured a static route redistribution profile. 

This is done under "Redistributio

SPI Value in phase 2

I wanted to know that I could see the SPI value in the wireshark in site to site policy based VPN.

So basically in base two there are two SPI value inbound and outbound, so if the attacker is capturing my traffic then he'd able to see my SPI value. t

Vpn access using GlobalProtect with AUTENTICATION TWO-FACTOR

We have

The company want  that all people accessing from GLOBAL PROTECT vpn CLIENT use the two-factor autentication. We have released an U2F USB security usb key for the email. 

Does PaloAltoNetork support an external Two-Factor Autentication for the V

Can I export traffic log more than 1 million lines in panorama M500?

Hello,

I was asked to export 3 month traffic logs.

I exported via gui but it has about 1 million lines and only contains less than a 1 day.

How can I export full 3 month traffic log in panorama M500?

panorama Device template HA setting error

Hello,

I am getting an error pushing a template from panorama to a device as below

Details:

• . High-availability ha1 interface needs a prefix length(Module: ha_agent)
• . Commit failed
• Warnings:

This is related to a HA settings. However i have manually set

Decryption profile DECRYPT-CERT-VALIDATION traffic denied

NA