I don't understand wildfire work.I have this example that Firewall had wildfire-virus signature but was created wildfire submission log before wildfire-virus identificationwhy?
Hello Community, Do you know if over snmp I can to have information about, license, support and signature info? Someone implemented snmp and can to see this information like cacti or other solution. Best RegardsAndres
We have an issue with SIP sessions randomly hang on the firewall. We are trying to do packet capture on the Palo alto firewall. Since the issue is random, so we need to leave the packet capture on until it happens next time. It seems the firewall automatically turns off the packet capture after about 10 to 15 minutes. Is that by design? Is there...
After some advice please. How can I prevent Global Protect client from trying to connect to an external gateway when the device is on an internal known corporate network ? My connect method is already set to On-demand (manual user initiated connection) but it still attempts to connect at device logon. Thanks
New Macbook pro, MacOS 10.14.5 the user account and applications were migrated using migration assistant.In the past this works fine. User is getting continual popups: Steps taken: uninstalled using globalprotect installer. Reboot. Reinstall. Same error.Uninstall client again, in terminal ran support document steps to detect enforcer kernel exte...
Please can someone shed some light on the following issues which we are facing for PA-5220 HA Configuration:We can see port lights on HSCI port but not on HA-1/HA-2 ports even when they are connected,. Should they be enabled somewhere because in GUI i can just see in-band ports till port 24.How can we setup HA using dedicated ports, because in D...
Hello,We have a server on the DMZ zone and another server in the other DMZ site.We need to allow traffics between the two DMZ zones with the MPLS connection.I don’t know how can I put this configuration on my PA firewall or maybe I should contact my MPLS provider to do this act on the MPLS router?I will appreciate your help or suggestion to solv...
Hi all,I have an IPSec tunnel connecting to an old SSG. Tunnel came up successfully and SSG can see the traffic and is returning correctly into the tunnel. However PAN's decrypt counter remains 0. When i did a packet capture, the returning ESP packet is dropped shown below Frame 43 and 47:The setup i have is:eth1/1 - ISP WAN in zone "outside"loo...
We used Nessus to run security scan on the PA-5220 we are trying out and it came back with the following medium vulnerability:https://www.tenable.com/plugins/nessus/90317The remote SSH server is configured to allow weak encryption algorithms or no algorithm at all.Nessus has detected that the remote SSH server is configured to use the Arcfour st...
Can Wildfire engine detect & identify zero day or known threat if SSL decrption feature is off in Palo Alto firewall ? WildFire can discover zero-day malware in web traffic (HTTP/HTTPS), email protocols (SMTP, IMAP, and POP), and FTP traffic and can quickly generate signatures to identify and protect against future infections from the malwar...
How we can make test Global protect users without registion of certificate and DHCP only Local user. Can someone share how to configure a simple and fast way to configure GP
Hi Random question but has anyone had any issues when enabling HA1 encryption? I performed a BPA yesterday and noticed that we do not have HA1 encryption enabled. I looked into it and seemed like a very simple/quick win to do and after following step 6 from here and commiting the change HA1 goes down.The firewall stays up and operational just th...
SAML with RSA MFA authentication profile is getting synced on the HA active/passive firewall. The issue is that each node needs it's own unique authentication profile. As soon I change it on one node it sync's to the passive node. Is there any way to not have the authentication profile sync?
BUG -106914.this is mentioned in 8.1.9 PAN OS as addressed issue. Please find the detail:Fixed an issue on a firewall in a high availability (HA) active/passive configuration where HA1 and HA2 links stopped passing packets, which caused a split-brain condition after an automatic configuration sync. I need information if this is related to any p...
Hi!What are the difference between in the Preemption Hold time and Promotion Hold time?
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
