Hi we bought PAN-PA-1410-GP-HA license an I would like to know what this license for is it for both 2 firewalls in HA actve passive , how to activate it only on active firewall or passive firewall as well
Hi all, I have an issue where I cannot sign into the ClipChamp application when connected to Global Protect - the web version is fine. Something must be blocking it, but I can't find anything in the logs. I do see some traffic being allowed, but the end session reason is 'policy-deny' - what is this policy!? I'm not entirely sure this is related...
I cannot access our Palo Alto device through HTTPS, although I can still access it via SSH without any issues.After investigation, I found that the certificate was expired. Why did it work after restarting management plane from cli prior to changing the expired certificate then ?
We are facing issue with connectivity using GP in I Phone devices. We are getting the below error.gateway apple T the network connection is unreachable or the gateway is responsive check the network connection and reconnectWe tried installing new set of certificate with pkcs format on iPhone yet it is not working.We checked the Monitor log where...
I have Palo-Alto Firewalls and Panorama installed via KVM on eve-ng. I am utilising these systems for exam preparation. I require the eval licenses so I can utilise Panorama correctly. Can someone let me know how I can get the eval licenses without being a partner etc?
I recently moved a firewall into being managed by Panorama. I setup an Application rule specifying the application as PANORAMA which includes the ports necessary (I assumed) for Panorama communications but the firewall could not be added successfully until I allowed port 3978 traffic. The logs showed 3978 being recognized as SSL initially and...
I have PA-VM deployed in GCP with SD-WAN. PA-VM sits behind SD-WAN for intranet traffic.attached image is how my setup looks like . Query. I can't reach firewall mgmt via internal network (access via Public IP to mgt Public works fine) . everything on private interface (Eth1/1) works fine.We have return routing in place for MGT subnet in GCP rou...
After upgrade from a PA850 from 10.1.5 to 10.1.5-h1 in the end of last week we no longer can commit new configs 😞It gives the following error when we try to commit.Validation Error:rulebase -> security -> rules -> Block xxx -> hip-profiles unexpected hererulebase -> security -> rules is invalidWe've reverted to running config,...
I need to get licenses from the customer portal page under "Assets". However, I cannot as I keep getting an error on the page and only have "home" and "resources" as options in the left hand menu options. Is there a problem with the portal or is it something else?
I am Boundary Technician with the US AF, and currently TBS with a customer who are attempting to est. a tunnel with the following applications: wireguard and zerotier. The tunnels are not coming ups for some reason. Both applications are using the dynamic-udp as a standard port. Question, how to I request a port research / change for the two ...
Some real easy questions. We want to upgrade our M-200, so in software platforms, I want the m type, correct? Also, can I safely ignore built in plugins? they don't need to be upgraded separately, correct? thank you
Hi community, has anybody experienced with Palo Alto digital learning for PCNSE that the CDS Subscribtion videos are not loading, rather just spinning wheel? Where do we report this?
Hello, I am part of an MSSP, and we ingest data from multiple clients. Some clients forward logs from Panorama, while others use Strata Logging Service. I would like to understand how we can differentiate logs based on their source—whether they were forwarded from Panorama or Strata. Is there a specific identifier or static keyword in the logs...
I've been testing the logging of change events to a syslog server from Panorama. Syslog events indicate a change made by a person and the general section of the change without giving any specific details of what was changed. Looking in Panorama in the Monitor tab I can see the change event and some details that are sent to syslog, but the deta...
Hello, has anyone encountered this application "xunlei" appearing in the traffic logs using destination port TCP 33221? This port is also used by Cortex XDR. Wondering if this is malicious or benign. Appreciate your comments. Thank you.
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
