Hi , What are the ideal scenarios for implementing Panorama in legacy mode . Thanks
Palo alto integrate with Rsa Authentication Manager . I have configured Global protect which is working fine, now end users will authenticate with RSA using radius . Kindly share proper steps of configuration . I have tried as per document but some errors are showing . Thanks .
Hi Everyone, I have been trying to grasp the whole User-ID concept specifically with WMI and the more I read, the more I am confused. I have a simple setup. I want to be able to use agentless configuration and have it read info from my Domain Controllers. I understand that I need an account with permissions for various groups (event log Reader...
I'm very new to PAN firewalls and are still learning as I go along, they've only been in a month or so and the only rule is currently set any any from the trust to untrust zones and vice versa. We've got a couple of issues around some connections that traverse our 5250's (LAN to WAN and vice versa) but from the 5250's perspective its not seeing ...
There are some VAPT points of one of our customer which is attached with the email.My response on these vulnerability point are as follow:-1) SSL/TLS Server supports TLSv1.0 :-We can enable TLSv1.2 in SSL/TLS profile under Device -SSL/TLS profile and use these profile wherever required.2) Birthday attacks against TLS ciphers with 64bit block siz...
Hi Team, We have requirement to build a permiter gateway firewall under Hyper-V using PA-VM-300. In practical world this is realy possible to do so, force all traffic (in/out) pass through using Hyper-PA-VM. If it is there help with the documentation and suggestion like pre-requistes. Please help. Thanks ,animesh
Hi. I was just wondering what most of you people do regarding preempt option for A/P clusters. (and perhaps also some pointers regarding the different timers you can set, etc ) Main reasonis that the discussion to use preempt or not to use preempt comes up once and a while with customers and with coworkers. so what are some of you guys' findings...
Any way to copy objects and object groups from one firewall pair to another?
Hello, We are getting below messages on and off for our HA pair.eth 1/5 and 1/6 are part of the ae1 aggregate group nego-fail,ethernet1/6,0,0,general,critical,"LACP interface ethernet1/6 moved out of AE-group ae1. Selection state Selected",450025,0x0,0,0,0,0,,FW-1lacp-up,ethernet1/6,0,0,general,critical,"LACP interface ethernet1/6 moved into AE-...
I have some templates and template stacks that I've inherited. I would like to review the settings to understand them better, what's getting set where. Is there a way to export a report on those settings rather than clicking each of the tabs on each of the templates to see what's there?
We have got the 220's and i installed the licenses before i configured them in HA. License that we got says GlobalProtect subscription for device in an HA pair. But the GP license doesn' show up in the passive device. I have yet to do any further configuration but tried failing the device to passive to see if it changes anything, nothing, I f i ...
Hello Community, I have some questions regarding GoToMeeting and Security Policies. The System is a PA-3020, which is running on the software version 8.1.2. For GoToMeeting to work properly, the application stun has to be allowed. I have created a security policy in which I have allowed said stun. Under the monitor tab, I now see that stun is al...
I found that the google-base join time is displayed here and here. In the list, the firebase cloud message is not included.Recently, the rule setting only uses google-base, which causes FCM to not work properly, so I would like to ask "firebase-cloud-messaging" is When did join?Why not let it be in "google-base"? It is a service provided by google.
Has anyone experienced an issue where accessing file shares from a Windows 2008 R2 is really slow, often showing the hour glass taking up several minutes or cancel and retry opening file shares multiple times again before it opens up, after establishng a VPN session using Global Protect VPN client v4.1.9-7 (same issue also happened with GP clien...
I have been using small(ish) static routing tables until now. I have 2 PA-3020 in HA mode that control the internet and new offsite datacenter. At a second location 15 miles away, I will have a backup link to that datacenter. A third 3020 is in place to handle the connection. My plan is to install OSPF on the juniper gear controlling the int...
