Hi there, Is it possible to enforece browser challange for Cpative Portal for HTTPS traffic with out SSL inspection on the firewall? Regards,Nagarjuna
I think I know the answer for this question but would like to confirm with anyone who actually imoplemented this. I have a static route with destination 10.237.102.143/32 going through tunnel 10 . Now, I would like to have a staic route to 10.224.0.0/12 through tunnel 20. As per my understanding, any traffic destined to 10.237.102.143 will take ...
Is this supported or not?It can be configured, but rumors floading around the internet says that there is a part in the panos 9 that says support for pre-negotiation will be added for some models, among those 3200
Hi, I am trying to configure palo alto with ansible. the normal ping and ssh connection is fine but the "ansible -m ping all" command is returning error that the "ssh authentication failed". How is that possible, if the normal ssh is working fine. Please tell the steps to configure ansible with palo alto or any supporting docs. Thanks
I was Testing the Connectivity between two end points for Testing Purpose only Server(10.50.50.1)--------Sw1---------eth1/8----- PA-------------eth1/7-----------------Sw2-----------User PC(10.7.7.6) PA VR1 has interface Eth1/7PA VR2 has interface Eth1/8 Server IP 10.50.50.1PC IP 10.7.7.6 Sw1 and Sw2 has point to point connections with PA. 1>...
I have configured LDAP group under Group Map settings.I have added the ldap group there. Then under security policy source user is any and under user i added that group name. When i do sh user group list i see the group name and user ids under it. when i try to reach the destination ip under that rule firewall denies that traffic. Security ru...
I have created CSR and exported that to our Server team as they would generate the cert based off of that.PA is in active passive mode. Do webgui cert of Active PA will syn with Passive PA?Do I need to create separte CSR for the passive PA? We also have PA in Active Active mode.Does A/P Webgui Cert process is same as Active Active PA?
Seems we are unable ro run SaaS usage report more than 30 days?Is there any way we can run usage report for SaaS more than 30 days?
Hi, I was wondering if anyone have been succesful in getting the actual file names of what is being up/downloaded to ShareFile? All I get is file name 'blob'. We do decrypt the traffic but my guess is citrix encapsulates the files making the names unreadable. Anyone? Thanks, Mikael
HA active deviceUpon initial configuration the device with the lowest priority, value close to zero, becomes the active unit (default priority is 100). If two devices have the same priority value, the device with the lowest MAC address of the HA1 link becomes the active unit.Can someone give me real world example of when both FWs would have same...
OS info: openSUSE Leap 42.3 After installing globalprotect I tried to connect for the first time, but it seems to get stuck. After the inital warning messages, I continued as suggested in the manual: >> connect -p portal.vpn.broadcom.com -u tc912575 Retrieving...
I have a question about the upgrade.If I want to upgrade PAN OS from 7.1.2 to higher version. <such as 7.1.22 or higher>Do i need to in-place upgrade step by step from 7.1.2 to 7.1.21 then 7.1.22. orI can upgrade directly from 7.1.2 to 7.1.22?
Need some feedback. On Windows 10 this doesn't seem to be a problem but for OS-X (version 10.14.3 Mojave) GP doesn't connect on a reboot. It's saying the portal isn't available. I think GP is starting up before the the NIC and that's what's causing this. Does anyone have any pointers on where to look? We're running GP version 4.1.6.
Hi, We realised that the PA5050 (panos 7.1.12) dataplane has increased to 55% when it is always is at 28%. I would like to know why this increase is caused. I dont know how to translate this commands in order to have an idea about why is high the dataplane. show running resource-monitorDP dp0:Resource monitoring sampling data (per second):CPU lo...
PavelK
on:
handle (username) change?
PavelK
on:
Replacement of RMA
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
