General Topics

Resolved! show system setting ssl-decrypt certificate-cache

Need to confirm output of this command is when user access the ssl website it is the cert of that website the get cached in the firewall?

Resolved! user if agent and switching between ids

we have configured rules with group mapping using LDAP.

We have one user where he switch between user ids and when he trieds to login to server with user id not allowed in list he gets

denied.

should he log off and log on as best practice when he switc

Resolved! Minemeld Proxy error

Hi,

I've setup Minemeld to use the corporate proxies based on this thread and I'm still getting this error:

"ConnectTimeout: HTTPSConnectionPool(host='www.dshield.org', port=443): Max retries exceeded with url: /block.txt (Caused by ConnectTimeoutErr

Resolved! Panorama Managed collectors - Default and M500 Log collector

We have Panorama M100 in Panorama Mode.

They are in HA pair.

Also we have 2 M500 as dedicated log collector mode.

Under Panorama managed collectors  I see default is also checked along with 2 dedicated log collectors.

Need to know why default option i

Resolved! Split tunnel VPN inclusion rule - traffic dropped

Hello Community,

I need to allow traffic to come down the VPN tunnel rather than the Split Tunnel.
I have addred a VPN tunnel inclusion rule on the GlobalProtect Gateways as described in this article:

https://www.paloaltonetworks.com/documentation/80/pa

Resolved! need steps to install minemeld on redhat

need steps to install minemeld on redhat

Resolved! Unable to export certificates EXCEPT via IE11

Two PA3020s in an active/passive HA pair

PanOS 7.1.14

Tested with Google Chrome and Firefox on Linux.

Tested with Google Chrome and Firefox on Windows 7.

When trying to export a certificate from Device tab --> Certificate Management --> Certificates, n

Resolved! Moving between device groups

I am looking to move my firewalls from one Panorama (7.0.3) device group to a new device group.  All active policy rules have been cloned over to the new device group from the existing device group, and the objects are all "shared". 

Even though al

Resolved! show system setting ssl-decrypt certificate -----No inbound cert

show system setting ssl-decrypt certificate

Certificates for Global

SSL Decryption CERT

global trusted
ssl-decryption x509 certificate
version 2
cert algorithm 4
valid 171204224608Z -- 221204225608Z
cert pki 1
subject: NGFW-2
issuer: Root CA 2
serial number(19

Resolved! Cannot retrieve indicators from FS-ISAC feed

I recently created a feed over at FS-ISAC for my organization, and I'm able to connect successfully from within MineMeld, however I am not receiving any indicators. My initial_interval is set to 30d and when I test using 'taxii-poll' from the shell ...

Resolved! Using Same layer 3 network with different vlan tag

Need to confirm if we have layer 3 subinterface say 

network 11.11.1.2/24  vlan 100

network 11.11.1.3/24  vlan 200

It is possible to do this on  the PA?