Hello! How to configure a backup VPN?The main VPN configured and worked, path monitoring worked
Hi All, Just a sanity check question to ensure my config and thinking okay. We are having issues with VMWare Airwatch traffic to a cloud server for a customer that migrated across to our network. They don't seem to be able to connect to the server for deployments. Traceroute to the server blackholes within VMWare environment. Test from other sou...
Reaching out to the community to see if anyone has a solution for obtaining nice pretty VP readable reports for user web browsing traffic history that works well with the PAN firewalls? The URL report on the firewalls is overwhelming and requires a lot of massaging to get something they can read and understand. We really only need something that...
Hello,I have user-id enable on the trust zone and it works fine. I also have a DMZ zone and was wondering if it was ok to enable it on that zone? I know best practice is to not enable it on the outside zone, but we have many dmz to trust security policies and I would like to see in the reports some of the user accounts that are sourcing in the D...
Dear All, I have follow the below articles but it does not work properly. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGzCAK Please let me know if there is any other alternative way to allow the specified urls. Thanks in Advance
Hello, I tried to create a STIX/TAXII miner for otx.alienvault.com. I used the default MineMeld taxii client for this(minemeld.ft.taxii.TaxiiClient) and the new client minemeld-taxii-ng(taxiing.Miner). The first client does returns the error ' module object has no attribute 'sslwrap''.The second returns a 406 client error, which leads me to assu...
Is there more details on the route reflector options? The documentation is pretty vague. what is enable sender side loop detection? What is bidirectional peering?
Hello community! I have an issue you maybe can help me with:I´m deploying PAN-VM firewall on NSX and noticed that the template where I added the VM doesn´t have interfaces.The VM is connected to the Panorama and the template is in sync, I push a new zone and this creates a new vwire pair of sub-interfaces on the VM as it should be but in Panoram...
Hi,I'm using outputs feeds from minemeld in my Firewall and I have seen the next:If I try to retrieve an output with 142 or less indicators, it works. The Firewall shows the entries from minemeld output node.If I try to retrieve 150 or more indicators from an minemeld output, it doesn't works. The entries in the Firewall are empty.The logs in/op...
Hello Community! I have an issue with scheduled reports, they are not being generated. I send a "test email" and I receive it, I reboot the Firewall and I receive the scheduled reports for some time but then it fails again. I´m running PAN-OS 7.0.1 Did anyone have the same issue?? How can I troubleshoot this issue?? In which file in the tech...
My employer is starting to use PAs, and as a networking person I want to get much more comfortable with them, I wanted to buy an small one off ebay to use as my home router. I won't need global protect, OR wildfire as I just want to run the PA as a router in a "less critical" environment. If I do get one off ebay are there license fees that I'm ...
Hello, Basically I want to QOS all voip traffic coming in and out. Can I just QOS all traffic going to AND coming from a particular WAN address? (see security rule). That way i can just specify all applications and all services. I’m unsure if below setup is working.In the Statistics page can’t see any bandwidth changes even when making phone calls.
How do you determine(map) which Feature (Policy, Objects, Network, Device) is conntected to which Adoption Category (Wildfire, Anti-Virus, Anti-Spyware, etc.)? I am missing the connection between how to improve my metrics for the Security Profile Adoption Summary and which feature will impact the metric/score. I have reviewed the Getting Star...
Hi Team, I am just wondering on how to made Dual IPSec VPN Tunnel UP at the same time with redundant ISP link after mapping each ISP in different VR. We have configured dual VR. In that, Primary ISP port is mapped in Primary VR and Secondary ISP port is mapped in Secondary VR. Due to this above scenario, in order to made the Phase1 UP for the S...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
