Is there a limit to the number of URLs we add inside one URL category?If i will add many URLs in this category affect Palo Alto performance?
Good morning, GP works great on our iPads, except you need to open the app and hit 'connect'. Sometimes it becomes disconnected and needs to be done again. This is for K-12 students, so we're hoping there is actually a way to force persistence. Is this possibly a limitation that Apple has placed on iOS or maybe a config that needs changing on...
Hello, If someone would like to establish 2 IPsec Peerings between a PA VM and a Juniper SRX, can you use the same Phase1 for 2 different Phase2 on the Palo Alto ? Phase1 is IKEv2 if it matters.
Hi - I am unable to redirect https://mypublic-ip:7788 to http://myprivate-ip:8899 using DNAT. Any idea please. Tks.
Is there an issue with the support portal. Unable to create a new case
Someone can stop me if it's meant to do it this way, but if feels like a bug that needs fixed. GlobalProtect 5.0.4-16PanOS 9.0.1HIP Checks in place Scenario:Using HIP checks to limit scope of connectivity to internal network. Issue:Let's say that one of my HIP checks is to look and make sure that widget.exe is running on a PC. I connect to Glob...
We have observed a high memory utilization on PA-3060 ,do we have to upgrade our RAM or this is normal behavior? show system resourcestop - 02:47:35 up 631 days, 20:43, 1 user, load average: 0.02, 0.04, 0.05Tasks: 117 total, 1 running, 115 sleeping, 0 stopped, 1 zombieCpu(s): 3.7%us, 1.3%sy, 0.3%ni, 94.5%id, 0.0%wa, 0.0%hi, 0.1%si, 0.0%stMem: 3...
First issue:I am trying to get load config partial working from local file , address objects , address groups, service groups and security and NAT rules, to local firewall. I am used to doing load config partial on PANORAMA to device groups.. but not local file to local FW.. cant quite pin down the API XML format, even when looking on local ...
Pushed the global protect client out through SCCM. Which works, but when the auto update is applied, we end up with the windows installer issue. the msiexec /Option error I have checked to make sure no other installer is running, and there is nothing. Has anyone been able to solve this issue?
I received a request to change the current security profile on 3,502 policies (spanning three VSYS) from a shared profile to a local profile. Is there a better way to do this than doing them individually through the GUI? I don't even want to think about how long this would take if I have to do it through the GUI, not to mention the arthritis I'l...
AlientVault has the OTX with a taxii feed configuration which looks like it could be handy. However the miner for the alienvault reputation has a link which 404's. Does anyone have any idea if this overlaps? Also the AlienVault taxii feed would require an API key, I'm not entirely sure how to set up a new miner for taxii which requires an API ...
I'm trying to monitor the availability of one tunnel, to re-route the same destination traffic into a second tunnel. The other side can't do routing protocols right now--which would solve this easily. I hoped to find a non-manual way to fail over. I read in a discussion that the SOURCE IP and destination IP have to be in a single network. The d...
Good day, if you try to open http://techblog.netflix.com our PA currently recognize it as netflix-base.Is there a way to declare it as normal web-browsing if they try to open the techblog page since we don´t want to allow netflix-base for our users? Thanks
Hi ! We are migrating to Palo Alto from ASA Where ASA TCP normalization is enabled for option 28. How we can achive the same in Palo Alto ?
We have deployed GP full tunnel VPN across the enterprise. We have some departments using OpenVPN, My question is why can't users use OpenVPN without having to disable GP first. thanks,
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
