Dear Palo Alto experts...,
We have various systems in our LAN seperated by our Palo Alto firewall.
In the last 24 hours the firewall detected 2.7K times the virus "Virus/Win32.WGeneric.rktkq"
The systems are scanned for inventory by two programs. Sp
...
Hello, сolleagues!
I am interesting in the PaloAlto and I am only starting to use it.
IPlease say where can I buy subscription to the The WildFire module ?
Can I buy only The WildFire subscription or I must buy smth else?
If anybody know where is a page
...
Is there a way I can generate automatic reports through the API on a weekly basis? I know there is a way with GUI, but is there a way for the API to generate automatic reports?
We use F5 with its VIP interfaces in DMZ and is doing SSL offloading (presents a cert on the webserver's behalf allowing plain text traffic to be inspected). As in below example, external source(1.1.1.1) acesses 2.2.2.2(PA NATS to 10.10.10.10 of the
...
Before I go down the route of writing a prototype (or attempting to), I was wondering if there was a prototype that I could use to read an IP list in this XML format. I would be interested in pulling out the address and country:
<?xml version="1.0...
Good afternoon! I have a quick question about running MineMeld from the OVA. We have some pretty strict policy against installing via GitHub and, the best way for me to get MineMeld installed, would be to use the OVA method. I'm new to running it
...
I am a little new to PA firewalls. My question is, with an expired Threat license, or no Threat license installed at all, is all the functionality of the AV and anti-spyware components not active? Customer has one with expired license, but I am try
...
Hi Experts,
I have a customer who wants to create new prototype for this customer.
customer requirement is very simple but, it's very hard to me.
first of one,
customer said spunk is using Rest API, below is feeds from splunk
curl -k https://s
...
Hi All,
I have an issue about sip/rtp traffic. Endpoints are using a calling application that used sip protocol . We have also enabled fragment feature in zone protection setting.I investigate this issue and when endpoint make calling, zone protectio
...
Greetings all,
I'm wanting to use the new Palo Alto provided dynamic IP lists to block known malicious or high risk IPs but, when creating a security policy, I can't seem to get it to appear in the list for selection. I've tried copy/pasting the nam
...
Hello all,
I am wondering if palo can identify and decrypt encrypted traffic on non-standard ports(other than 443)? In other words, does firewall decrypt all encrypted traffic traversing through that matches rule?
Hello,
We are not getting the list of individual users in the command: show user group name <name>
> show user group name "CN=adminstaff,OU=staff,OU=security,OU=Groups,OU=College,OU=Schools,OU=CEWA,DC=test,DC=edu,DC=au"
short name: test\adminstaff
s
...
the CLI command “show system resources” is show The Management plan cup useage,
but ,I found than The cli output cpu usseage is different with web ui show，
and the cli output is highter than web ui show.
why?
see the pic
Hi all,
Has anyone had success establishing a site-to-site tunnel between an PAN firewall and a Cisco Meraki Cloud managed firewall? I've been messing with it for most of the day and have not found much luck. I've added a third party peer on the Mer
...
I am trying to configure OCSP and I am a little confused.
I have added an OSCP responder.
It appears the second step is to allow the Firewall to use it by configuring Device-Management->Interfaces. However, for most of my settings, I am using a Ser
...
OtakarKlier
on:
Qualys scanner blocked
OtakarKlier
on:
Palo HA with LACP to Cisco Stack Switch
aleksandar.asta
