General Topics

how to add certificate global protect for ipad

Hi everyone,"I'm stuck at step 7 (7- Settings > Profile downloaded >"Im stuck in" Install > Enter phone Passcode > Install > Install > Install >Done),When I install the certificate, it shows a notification that it cannot be verified "not verified' When setting it up, there is an additional message: 'The authenticity of "myna...

Prisma icons stencils for Lucid charts

I am searching for the basic Prisma logo icons. I wish to reference Global Protect, Prismas remote Prisma cloud and other basic pretty icons/stencil Thank you

License Usage AuthCode

Hi there We are trying to track license usage as shown here: https://docs.paloaltonetworks.com/vm-series/11-0/vm-series-deployment/license-the-vm-series-firewall/vm-series-models/licensing-api/use-the-licensing-api/track-license-usage For the call to work, auth code is required. Calling the "devices" endpoint does not include this particular...

Resolved! Site to Site VPN

Quick question on setting a site to site vpn, using tunnel mode. If I have a site "A" peer going and connecting with a site "B" peer for a VPN, can both sites have the same IP address subnet, or will that conflict? Scenario: Site A: 192.168.20.5/24 (Local LAN) Site B: 192.168.20.88/24 (Local LAN) Would a NAT be required within the Palo ...

what's the recommended way to block ransomware in a firewall policy?

Hello, I am new to palo alto . what's the recommended way to block ransomware in a firewall policy?

GlobalProtect Android version 13 issue

Global Protect login continues to fail on Version 13 Android. It seems to have been caused by Android security enhancement issues. created it with SHA 384 but I can't log in. "The network connection is unreachable or the portal is unresponsive, Check the network connection and reconnect" There is no problem with global protect c...

EST Enrollment over Secure Transport

I use certificate based IPSec VPN Tunnels that rely on Certificates. The Certificate Authority i use supports EST to allow for automated enrollment similar to SCEP. Is there a way to configure Pan-OS to work with EST instead of SCEP? I have not been able to find any other forums to support this topic.

Resolved! Regarding Security Advisory CVE-2024-3393

Hello Team, I have recently upgraded my pa-1410 firewall to panos ver. 11.1.4-h7, because its preferred version so far. Today I have received this advisory link ... https://securityadvisories.paloaltonetworks.com/CVE-2024-3393 I have DNS Security enabled. Things are not clear to take an action, what id action required? I can see my version li...

Resolved! Failure to install Apps and Threats

Model PA-3050Software Version 9.1.16GlobalProtect Agent 6.1.0Application Version 8692-7955 (03/30/23)Threat Version 8692-7955 (03/30/23)Antivirus Version 4401-4918 (03/26/23)WildFire Version 757322-760771 (04/06/23)URL Filtering Version 20230406.20155 Issue: A few weeks ago, i started to notice that Apps and threats are failing to install. See...

Resolved! Multiple authentication profiles for GP portal and gateway?

Hi, I am using LDAP authentication profile for GP Portal and Gateway authentication. The problem is when the LDAP server is down I can not log in. So I want to use two authentication profiles. One for LDAP backend and one for local authentication. As you see in the attached screenshot, I added them to GP portal settings. The problem is I can not...

about transparent

sorry for bothering you all. I'm new to computer networking. And while I'm building my own system, I'm having some trouble. MODEM (internet) --- Firewall Palo Alto --- Laptop. This is the model I'm building myself. I was going to use transparent mode but I can't find it on the firewall paloalto 440. I hope you guys can give me some suggestions. ...

Resolved! Are there signature release for following vulnerabilities?

HelloI'm Tomoyuki Nakamura. Are there any plans to release signature for the vulnerabilities below?.These were not listed in THREAT VAULT or Security Advisory. CVE-2024-50379CVE-2023-34990CVE-2024-48889CVE-2024-12727CVE-2024-12728CVE-2024-12729 Best Regards,Tomoyuki Nakamura

Palo Alto Global Protect

Hello. I am looking to setup and use Palo Alto's Global Protect feature; The question I have is if I have only 1 egress port (WAN) port that is public-facing, can I setup my Global Protect on that egress port or do I need to use another port for egress and assign that port to both gateway and portal? Or can I use my one (egress) port to be a...

For those that seek to get SSH Proxy working

Searching the internet it seems that people are looking to enable SSH Proxy and not finding answers. I managed to get it working but must say that the current supported SSH decrytion parameters for all PAN-OS versions aren't the most secure ones so you should consider what's more important for your situation: SSH inspection with less secure S...