how can I generate url logs for an allow rule with url category selected but not url filtering prof?
Hi All, I've configured an external dynamic access list with the relevant account username/password to reach our minemeld server. When I test the connection however using 'test source url' in the external dynamic list configuration, this fails with a URL access error. On the minemeld server log: 127.0.0.1 - - [26/Sep/2019:14:25:45 +0100]...
Hey all-I tried updating a test box to 6.1.3 and encountered the error in the title. Per other threads, I tried manually downloading the latest content version and installing but it resulted in an error during install. Has anyone else encountered this with 6.1.3 yet?
Its a new firewall, with 2 interfaces in AE, zone configured and pushed through panorama template.When configuring L3 sub-interface for this AE interface, i can configure ip, vr but the security zone would not get applied to it.Both firewall and panorama at 8.1.8
Mac taking very long time connecting to global protect gateway. We are using the clinet version 4.1.11-9.Pre-log on always on VPN. It tries and tries until it connects. Sometimes it drops the VPN and tries to reconnect. All I see suspicious from the logs are below. Can anyone please assist with this ?P 98-T7431 Sep 18 10:11:16:160862 Info ( ...
What does the below mean:received from user-id agent #: persistent I'm finding that some addresses are registered to a tag that I don't believe I've created, - a "Palo-URL-and not entirely sure where it came from.... however I'm reading that a restart may be required for a clearing of dynamic addresses? https://knowledgebase.paloaltonetwor...
Hi, I am trying to configure user-id based authentication in Palo Alto 5220 (Pan OS 9.0.2). I have integrated Palo Alto with AD using LDAP profile. I am not able to add the AD groups in the "Group Include" list as they are not being listed in the GUI. I am using panorama to manage the firewall. However, i am able to view the groups in CLI of th...
Hi everyone, Good day. I have a query regarding the compatibility between a PA-3020 management port (ethernet) connected through an ethernet cable to a Cisco switch with SFP port. A transceiver is in place at the switch end for plugging the ethernet cable. Currently when it is connected not even the link LEDs are glowing. The specifications for ...
Has anyone used the PAN-SFP-PLUS-CU-5M twinax cables and connected them to Cisco Nexus 5500 series switches? If so did everything just work?
Since about 4 days I am experiencing a critical problem in relation to policy rules with address objects and suspect an update to address/region objects has caused this mess as I am experiencing this issue with: - manually added address objects- predefined country regions- dynamic address groups (based on tags- even if the address group is empty...
I have configured MFA with Radius.It is for https and RDP trafficWhen we access http site we get response page to put Radius Credentialsbut when we do RDP connection to server we get different response pageNeed to know how can i make same response page for both http and RDP traffic?Also response page ask for Password how can i change it to show ...
Hey Guys, before I get boo'ed and suggestion of more featured products to monitor palo devices (pano, something or rather dominated googles results) but...our main objective with monitoring our environment, is single pane for monitoring/alerting etc, and SCOM has fit the bill quite nicely. The past 6-12months we've looked at, and started implem...
We want to schedule dyanmic updates , we dont have test environment. we can schedule updates on satellite offices then after 2 days to be installed on hub sites. prb is if new application traffic hits it will be denied by hub as that application would be unknow for hub ? Any recommendation on this scenario.
Hi, I followed the docs when setting up a Palo Alto in an ESXI environment. I created 9 port groups for the device and connected each interface on the Palo Alto to one of them. When the Palo Alto came up all of the interfaces as not configured. If I set the interfaces to something (say TAP, Layer2, Laywer3 etc.) then they all come back as down e...
We have a handful of standalone PAs that we want to import into Panorama. However in our first interation it failed with the following errors and I am not sure why. The entire process isn't made clear to me either via PA (like a lot of their stuff but I digress) so I was wondering if anyone has done this and can help point me in the right dir...
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
