Hi all, I published one of web service through clientless vpn (OS 8.0.13). After authentication Its not loding properly. I go through developer tool (F12) its given following screen.please help. Thanks,Lakshitha.
can i upgrade from 8.0.17 to 8.1.7 directly? also would going to 8.1.7 change any of my current config?
Hello, I am trying to use Forticlient to connect to a remote network outside our coporate network. The connection is successfully established, it seems that the traffic is sent but no traffic gets received from the Forticlient. Anything needs to be done on the PaloAlto to enable traffic reception? Best regards
Hi, We have got global protect pre-logon set up and pretty much working now after quite a few issues.We still have one issue, although the pre-logon user connects fine when starting the end device prior to logging on (says connected on the windows screen and in remote users in the gateway it shows the pre-logon user), when the user logs on the u...
We have an issue that seems to be impacting our MAC users only. They connect to an internal wireless network, but the GP client does not detect that they are on the internal network. (We're using the always-on feature.) We've reduced the timeout to 1 minute, but even then and with a manual refresh, the client still seems to think it's on an e...
Hi,We need to configure an input rule to authorize an public IP address to access at one of our virtual machine on our subnet.Concretely, I need to authorize public IP address 195.193.194.195 access directly to our virtual machine with the private IP 192.168.1.1 on the port 3389 (Remote Desktop) only via our public IP address (82.83.84.85).I con...
Hello, I've been having a problem with Windows Updates when SSL Decrypt is turned on and I'm wondering if anyone else had to add these "new" Microsoft URL's to the decryption exclusion list. My firewall is on version 8.0.3 and my Windows version is Windows 10 Enterprise 1703 (Build 15063.483). I'm not sure what update package includes SSL Decryp...
Dear Team, I have a Dual ISP (Primary/Secondary).I need to configured IPSec Tunnel via Load Balancing method. What the method that we can apply to achive this. Regrads Karthikeyan Balamurugan
HI,I would like to migrate one old PA 5020 cluster version 7.1.16 to PA 5220 cluster version 8.1.8. I would appreciate if someone can help me with the process to follow for this migration. As this is my first PaloAlto firewall migration project and I don't have a document to follow. ThanksJP
Hi Team, @reaper , @BPry Recently I have come across a scenario that palo alto was dropping TCP SYN packets which have ECN and CWR bits set. upon checking the global counter, i have seen that the drop reason was 'process owner message err, no predict'. anybody have seen this?. PA doesn't support SYN packets with ECN and CWR set ?.. Once I disab...
Hi 2 all We have working Agentless User-ID and User-Based and Group-Based PolicySpecial AD-account, "pauser" have necessary permissions. I found, what its login and password is configured in Device > User Identification > User Mapping > WMI AutenticationDevice > Server Profiles > Ldap > "Name of LDAP Profile" I need to change ...
Hello. A customer would like to add smo more anti-spam features to a Palo Alto FW setup and is intersted in using EDLs in connection with publicly available anti-spam lists. Anyone knows a good and free anyti-spam list I could use for that? I've checked all the most known ones but they all offer only lookup capabilities (you query an IP/FQDN and...
We migrated from Cisco ASAs to PAN-3020 devices and I'm curious whether a feature from my ASAs exists in the PAN world. On our ASAs, we could create a pool of dynamic NAT addresses that would be matched 1-for-1 with inside hosts going to the Internet (we own a large block of public IPs, so we can do this). On the ASAs, once the dynamic NAT pool ...
Hello all, I am currently configuring an HA cluster (active / passive) with the following configuration: Primary (active) box: PA-820ethernet1 / 1: 1.1.1.1/29 (external interface)ethernet1 / 2: 192.168.0.1/24 (internal interface)MGMT: 192.168.50.251/25 (Management interface) Secondary (passive) box: PA-820ethernet1 / 1: No IP address, as this is...
Hi Team, I'm not able to configure two separate proxy id in PA-3020 firewall. If I configure either the tunnel goes down or one of the proxy configured second is not working. Ipsec tunnel is IKEV2 between sonicwall and PA-3020.I'm getting error "ikev2 child sa negotiation failed when processing traffic selector..."
