Hi If someone overrides a setting locally on firewall, can this be further overidden by Panorama using force template values? ... and is that instance what happens to the green and orange cogs? Thank you
I have a GP portal with TLS/SSL profile named "aaa.ssl.pr" which contains the "aaa-cert" which commons name is "aaa.com"When accessing the portal I see a different certificate in my web browser,If I put the same SSL profile on another test portal, I see the correct certificate.
I have a single HPE 5400 that links to a PA-820. I have an untagged p2p VLAN on a Layer3 interface on the PA. I use this as the "MGMT/LAN" side. The HPE is doing routing for internal networks. To add another VLAN, I tagged that same port on the switch, and I add a sub-interface on the PA with the appropriate tag.So, the uplink between the switch...
MINEMELD 0.9.44 2018-01-30T13:55:26 (4857)mgmtbus.checkpoint_graph INFO: checkpoint_graph called, checking current state2018-01-30T13:55:26 (4857)mgmtbus.checkpoint_graph INFO: graph status None, checkpoint_graph ignoredTraceback (most recent call last):File "/opt/minemeld/engine/current/bin/mm-run", line 11, in <module>sys.exit(main())Fil...
Hello All, I have tried to export logs from firewall its reach limit up to 1048576 rows, this is only for 3hr logs can anyone have the option to filter logs or can we exceed this limit.?
Hi all, I was dealing with a scenario recently which I eager to use the Palo Alto firewalls.In my design, it is a must to use the feature which is called ARP alias in Cisco terms, and ARP publish in Juniper terms. In case of Linux as Palo Alto is using is proxy_arp_pvlan.the explanation regarding to the proxy_arp_pvlan is as follows which is der...
Hello community! I have a question, checking my stick high firewall, I wanted to know if in my firewall I could configure the inspection mode. I have seen another product from another manufacturer that has 2 inspection modes that are the flow mode and the proxy mode. I would like to know if in stick high I also have that functionality available,...
I thought that HIP check licensing expiration (trial version), would cause any rules on the FW - using a HIP check profile column to not match. Instead, it appears that it causes the firewall to simply not care about that column at all.... and allow traffic through, on the rule with the HIP check profile specified, even if you are out of compl...
After reviewing a few documents, I'm hearing that doing this is not a best practice.... If I choose to do so, does anyone know where those credentials are saved and how they are saved in the agent on the endpoint? I'm guessing encrypted cookies are the way to get around this with longer validity times?
Hi, please tell me how can i contact to Palo Alto for taking my blacklisted domain to whitelist in a palo alto DB
We have a video app that is streaming through our Palo Alto firewall on port 80. Everyone once in a while the session fails and can only be revived by hitting refresh in the browser. I am dealing with a network manager that's convinced the PAs are Resetting the session.Before I go through the hassle of creating override policies for port 80 with...
root@srx# show groups junos-defaults applications application junos-ms-rpc-uuid-any-tcp term t1 protocol tcp uuid ffffffff-ffff-ffff-ffff-ffffffffffff; [edit] root@srx# show groups junos-defaults applications application junos-ms-rpc-uuid-any-udp term t1 protocol udp uuid ffffffff-ffff-ffff-ffff-ffffffffffff;Juniper SRX is haveing in-built serv...
Hi Team, When we export a "policies security rulebase report" which shows unknown format like below, Note: Current firmware version is PAN-OS 8.1.10 when on PAN-OS 8.1.9 we could view correct values! Did anyone faced this issue? please let us know whether its because of bug? please advise us whether we need to upgrade or downgrade the PAN-OS or...
Hi Team, I have an issue, where customer is not able to update global protect app using transparent option. I'm explaining the issue in very detail to avoid confusion. User machine is installed with client version 2.3.1. During the time of deployment portal app setting was configured to upgrade "allow user to upgrade with prompt" Now global prot...
Hi! My company is rolling out a small pile of Palo Alto firewall models and I'm trying to learn the nuances and best practices of these devices. Initial implementation and basic functionality has been pretty straightforward. Now we are trying more advanced things. My current issue is user authentication. I have a scenario that I feel must be ver...
