General Topics

deny telnet command but permit JDBC protocol

We have an internal discussion about whether it is possible to block the 3 way hanshake TCP but allow the JDBC application protocol.
In other words we would like to block the test of the port with the command "telent address port" but we would like th

SSL Certificates from enterprise CA

I will admit, certificates are one of my bigest hates.. I just can't get on with them

Firstly we have a microsoft EnterPrise CA. Which I am not overly familiar with anyway ( But I have managed to get the web interface workig on it...)

Idealy what I w

RMA'd Panorama m-100, how to migrate?

We had to RMA our m-100 Panorama and now I want to replace the failing one with the new one but for the life of me can't seem to figure out the steps to do that.  The link from this page: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id

Refresh EDL from webserver

Hello community,

We are using EDL for manually blacklist and whitelist some domains. We configured all our firewalls to refresh the EDLs every 5 minutes, but EDLs don't refresh until a couple hours. The solution that we found is use the "import now"

Push custom signature using API

Hello colleagues, how I can upload to firewall custom signature using api or cli interface?

Palo Alto Vulnerability Points (Urgent Action Required)

Hi Team,

Can anyone provide your valuable suggestion here please.

Below are the VAPT points shared by customer and solution provided :

PA Vulnerability points (For reference please find attached pdf) :
1) ssl/tls protocol initialization vector implemen

Any way to get this scenario configured?

I have GP Gateway license on my PA-5020 firewalls. I would like to allow 200 corporate owned samsung phones to access the VPN and block all other mobile phones. what are all the options I have to selectively allow them other than having a certificate

Renewing a certifiicate with digicert fails

There is plenty of space on the disk. Any insight on what could be causing this problem? Thanks in advance!

Explicit and Implicit Allowed / Denied Apps?

I am trying to understand the relationship between apps and how rules for specific apps affect the access of other apps.

I was reading this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClirCAC

In there, it uses t

Logging to Panorama VM

To cut a long story short.....

we lost Panorama VM. (ESX)

i removed firewall (3020) from Panorama management and selected "disable Panorama Policy and Objets" in Device\Setup\Panorama settings.

imported policy and objects before disabling.

built new VM