Hey ,
i just wondered why in the era that all web traffic is moving forward beeing encrypted and browsers like chrome will soon mark websites that uses HTTP protocol as "unsage" paloalto "web-browsing" application still uses in it's default ports on
...
Hi guys,
How can we creat a prototype miner in the MInemeld hosted by autofocus, is there any tech document with regards to how to customize/config a prototype for Miner.
Thanks
Hi,
We need to decrypt traffic (SSL Inbound Inspection) for a server which is running 3 URL. This server has 3 certificates, one per application.
So we would like to decrypt traffic for this 3 applications but in decrypt policy we only configure usin
...
Hello everybody,
is there any article or best practice document which discribes the configuration of a Palo Alto 3020 Firewall HA-Cluster active/passive while there is already a working stand alone PA 3020 Firewall.
Is it the same way I configure a H
...
Hi all,
we have some 160 firewalls connected to a single panorama.
One of our suppliers get read only accounts on the firewalls. The accounts including the password and profiles were created on panorama and then pushed as device settings to the firewal
...
Hello All,
BOX 3020, with PANOS 8.0.9 with USER-ID problems
Some IPs are mapped to machine names... not anymore to users...
admin@BRFW-3020-02(active)> show user ip-user-mapping all | match bres
172.26.20.116 vsys1 UIA XXXXXXXX\bresd11192$ 42609 42609
Hi,
I would like to know the way it operates in the backend how palo alto does the SSL decryption in Vwire mode . As in a L3 deployment the connection will terminate on the firewall and firewall acts like a MITM and does the SSL Proxying. How is the c
What is the correct syntax to exclude a whole domain, including subdomains and pages from SSL decryption?
Say exclude all URL's from "test.com", would this suffice:
*.work.com
or would i need to include a list like:
*.work.com
*.work.com/*
*.www.work.c
...
configured site to site ipsec vpn between PA 820(head offc)XG firewall (branch offc)successfully. in the head offc we have 100 mbps download , 25 mbps upload speed and brach we have 100 mbps download and 50mbps upload speed. the vpn performance is ve
...
Hello community,
I was wondering if is possible to make Globalprotect for IOS or Android devices to work properly with connect methods other than on-demand, for example pre-logon. Did anyone accomplish this connection method??
Thanks and Regards,
Mar
...
Hi! We just finished deploying the PA-5260 running PAN-OS 8.0.10 at our edge. Everything works well so far, but we see the log message below in Monitory->Logs->System:
Name resolution takes too long, diskable name for report [report name]
The type is
...
I have requested palo alto uel re categorzation team for re categorizing the main url of a site for ex:
abc dot com.
It has re categorized correctlly by Palo as requested. However I am getting blocks when I access abc dot com /subdomain
When i try re
...
We are looking to deploy our new boxes (PA-3220) in HA in the next few weeks. We are trying to go with best practice methods.
Currently, we have an Layer 2 ae interface that has multiple subinterfaces. Each subinterface is tagged with a Layer 3 SVI.
...
With our firewall for VPN and DHCP all we configure is under GP gateway/agent/client settings we have an IPpool and address route. We need to add DHCP option 160 and I don't believe that it can be done on the Palo. We have never setup a DHCP relay
...
My PA is already connected to the Panorama.
I had to change the Management IP address.
The PA lost connection to the Panorama.
The Panorama shows the PA with old IP and status Disconnected.
Is there a way to update the IP of the PA on the Panorama, or f
...
TomYoung
on:
file blocking profile not working for SFTP
BPry
on:
When logging into the community can I turn off the email a code?
BPry
on:
Cortex XDR: How to block execution of some unwanted apps
OtakarKlier
on:
Inquiries about PBF nexthop settings when the ISP is a DHCP Client
| User | Likes Count |
|---|---|
| 10 | |
| 10 | |
| 7 | |
| 7 | |
| 6 |
