In PA the username is part of the running config or local config of the PA right?Where does local database or local password stored in PA?
I'm just wondering if there is a way for panorama to talk to vmware to pull in the virtual systems and tags for quicker deployments much like it can do with AWS. I have been looking around but I haven't seen anything specific and help would be great.
We have an internal discussion about whether it is possible to block the 3 way hanshake TCP but allow the JDBC application protocol.In other words we would like to block the test of the port with the command "telent address port" but we would like that the connections via JDBC continue to work.is it possible to do this theoretically? Is it possi...
I will admit, certificates are one of my bigest hates.. I just can't get on with them Firstly we have a microsoft EnterPrise CA. Which I am not overly familiar with anyway ( But I have managed to get the web interface workig on it...) Idealy what I would love is top be able to generate certificates on the firewall that are trusted by all clients...
We had to RMA our m-100 Panorama and now I want to replace the failing one with the new one but for the life of me can't seem to figure out the steps to do that. The link from this page: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNMCA0 is broken and support has been less than helpful. Has anyone done this before...
Hello community, We are using EDL for manually blacklist and whitelist some domains. We configured all our firewalls to refresh the EDLs every 5 minutes, but EDLs don't refresh until a couple hours. The solution that we found is use the "import now" button, doing that the EDLs refreshes. Is there any log we can search to see why the EDLs doesn't...
Hello colleagues, how I can upload to firewall custom signature using api or cli interface?
Hi, When generating a flow basic log - is there any way to export just the pan_packet_diag.log using scp? According to https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClpFCAS the file wiil be included when exporting a TSF, but it would be useful to be able to export the single file...
I'm defining a new group address object which should include addresses of several different tags (e.g. "Tag_1", "Tag_2", etc.).When trying to define the match field I cannot find a way to actually do that. I'm not sure it's even supported. Whatever pattern I use, no address object is assigned to the group.I've tried patterns in the following sty...
From Panorama during commit process , just typing "commit" and press enter will do commit to all device group/template ?
need to know if ssl decrypt exclude cache timer is 12 hours or 24 hours?
Hi Team, Can anyone provide your valuable suggestion here please.Below are the VAPT points shared by customer and solution provided : PA Vulnerability points (For reference please find attached pdf) :1) ssl/tls protocol initialization vector implementation information disclosure vulnerability (BEAST) - SSL/tls profile needs to be configure for f...
Hello, Does anybody know if it is possible to block specific browser extensions from being downloaded?I would like to block the searchencrypt browser extension. Thanks
I have GP Gateway license on my PA-5020 firewalls. I would like to allow 200 corporate owned samsung phones to access the VPN and block all other mobile phones. what are all the options I have to selectively allow them other than having a certificate authentication(because I have external clients connecting to same portal/gateway on laptops)? th...
There is plenty of space on the disk. Any insight on what could be causing this problem? Thanks in advance!
Raido_Rattameis
reaper
on:
VPN with two subnets
TomYoung
on:
Device Security license
reaper
on:
No proposal chosen ikev1
