Hello I am curious if there is a way to block hardcoded IP's containing applications? So I would allow downloads when there is a domain name but not allow the download when it is a IP. Example: http://x.x.x.x/filename.exe
Hi Guys, I am trying to apply CSSP license on one virtual firewall. When I try to attach the received license I receiving the following error: "Failed to install licenses, Model incompatible: feature model is VM100 while the device model is PRA” I got the same for two different firewalls, I am starting to suspect that the template has some issue...
What’s the name of database where App-id,cotent-id is stored. and Location where it is saved
Good day!After the recent update Skype stop to function normally, I can upload, but can't download any file.Temporary solution was not to decrypt this category - "internet-communications-and-telephony".But I don't think that this is a normal solution. I've added skype, stun and web-browsing rules to allow skype traffic, but I have 2 Block Proxy ...
Hello, We were attempting a firmware update to HA pair. After upgrading the passive peer, we confirmed it was up and the user-id was populated and then suspended the active peer in order to update that. Unfortunately it turns out that management was only enabled on the WAN interface of the originally active peer meaning we can no longer access t...
when the Source NAT is configured how the 3-way handshake works?
Is it true that PA firewalls (eg: PA220 or 500) can only support or allow a single SNMP v2 community string to be configured for polling? (ignoring traps) ThanksGab
Global Protect silent install - Can you specify mutable portals during a silent MSI install of Global Protect? msiexec.exe /i GlobalProtect64-4.1.9.msi/qn PORTAL=gpgateway-a.companyname.com, gpgateway-b.companyname.com
BPA recomends making changes ( Sinkhole, Packet capture) on a number of our Security profiles. For example adding packet capture and sinkhole DNS. But one of the rules it recomends this on is the pre-defined "strict" Anti Spyware Policy. And other changes to the default Anti Virus policy... Neither of these can be modified so will fail to meet ...
Hi there,Can I send (print) output of a command to a csv file? (PA500, software: 8.1.4)For example the following command lists the users of the AD and disaplys on the screen. I need a switch/parameter or perhaps another command that lets me send the output (the list of the users) to a text or a csv file. Is that possible? Example of the command:...
When I login to PA I see Logged in Admins - so many users with ilde timeout.How can i fix this we have idle time out Auth with 15 mins. Is there any config i can do so that PA can log out users from Logged in Admin display in GUI?
HI Team, Can PUBG APP ID will be created by palo alto for blocking the PUBG game traffic. This app is worldwide used, It will be great if palo alto come up with APP-ID for blocking and allwoing this traffic. RegardsVenky
Is it possible to use a wildcard when creating a policy based off of a fqdn?Thanks
I have external contractors connecting to my GP Portal in an on-demand connection setup.Is it possible to enable 'always-on' VPN on same portal and gateway pair alongside with on-demand? thanks.
I'm seeing an odd issue where I've got a rule allowing sflow traffic coming from a WAN zone into my server zone where my monitoring servers sit. Most of the traffic passes as it should, but there are random subnets where the rule is being denied with it showing it is hitting the default deny policy. The only filtering on the rule is for port 2...
Raido_Rattameis
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
