I am told to upgrade PA to 8.0.14 if we are using the ssl decryption.Curious to know what feature is inside the PAN OS 8.0.14 that supports TLS1.3?
Hi all, I just ran into an issue while creating an External Dynamic List in Panorama 8.0. The source is a HTTPS address that requries a certificate profile for validation, so far so good. The problem is that I can't select any certificate profile, the list is empty. There's a certificate profile created under Device > Certificate Management ...
After installing the rpm (latest version as of today: 4.1.7, running on Fedora 28) the cli client cannot communicate with the service (although it is started): $ systemctl status gpd● gpd.service - GlobalProtect VPN client daemonLoaded: loaded (/usr/lib/systemd/system/gpd.service; enabled; vendor preset: disabled)Active: active (running) since T...
I am trying to install ssl cert on Minemeld but each time when we install and restart the service URL stop working. Please help me, how I can install cert using local CA
My firewall is using the following Interfaces/Zones: E1/1(5.5.5.170/29) and E1/1.1(5.5.5.174/29) are in the outside zone. E1/2(192.168.254.252/24) is in the inside zone. E1/8(192.168.1.1) is in DMZ zone. E1/1 and E1/2 are connected to the mainvr virtual router. E1/1.1 and E1/8 are connected to the DMZrouter virtual router. I have a web serv...
Hi, 1- Can I add OOB management interface to a security zone on PaloAlto firewall ? Thanks,Mahmoud
Hello, I am connecting to the VDI as the teststud user and can browse to Facebook. The session is hosted on IPC-VDI-VSH1 as per the screenshot below. I have copied our existing security policy which blocks access to Facebook, Youtube etc. I can see that the traffic is hitting the correct policy, however, I am still able to access Facebook. I ...
Just noticed that with Globalprotect 4.1.x the network profile changes to from "Public" or "Private" to "Domain network" for physical network adapter and not just for the VPN adapter while being connected to GlobalProtect service. Also when the VPN session is disconnected the physical adapter profile does not change but instead stays as "Domain ...
Happy New Year everyone Need to know if i run the below command Disable SSL Decryptionset system setting ssl-decrypt skip-ssl-decrypt yes Will this disable ssl decryption for 1 hour or 1 day need to know for how long?
I am trying test app id & put a rule in (all the way on top) denying my work station from accessing RDP on machines in other zones. I have successfully blocked users from accessing RDP on standard port 3389 but can still access RDP on a machine that listens for RDP on a non standard port (tcp 51000). I did not specify the non standard port...
Hello, We are trying to integrate Recorded Future IP risk list with our SIEM to do correlation after that. We have set up correctly the miner, which gives us around 50k indicators. We then proceed to pass it to the processor stdlib.aggregatorIPv4Generic, which just process 20k indicators. Finall we convert it to CEF format with the output cef.t...
Can anyone confirm these 2 new ranges will be added to the feeds at the appropriate time? Didn't see any discussion on this. https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Support-Tip-Azure-AD-updating-IP-Addresses-in-Mid-January/ba-p/304828
Hi All, Awhile back I was having an issue using DHCP on our PAN Fws. In the DHCP options, if I set the primary DNS to an internal DNS server and the secondary to a public DNS server, our clients randomly had issues accessing internal resources. I would notice even though they had connectivity to the internal server, it was using the secondary t...
Hi Friends,I have 2 server hosted in lan zone and one public ip . i have configure the NAT for 1 server from outside from port 80 and its working fine. but i want access the other server from lan with public ip from port 80 but its not working showing application is undirected. please suggest.RegardsSatish
Hi It is possible to allow a rule for 2 hours within a possible time windowI would like to allow for exampe youtube for 2 hours per day for our employees . Could i solve this somehow via API ? Regards Markus
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
