Hi,Why Palo Alto is detecting sometimes the application like SSL and sometimes like incomplete??????if the connection has 134bytes is not detected, but with more than 134b is detected..........
I'm in the initial stages of a support case, but am curious if you all have had issues or success with this scenario: A GP user that is: pre-login / always-on / machine cert auth / no split-tunnel (0.0.0.0/0 include route) with access to their local network Here's the problem: A user is at a hotel / starbucks (a place that has an open wifi conn...
Dear All, I need create Taxii miner with API Key Authentication I don’t know about how enable API Key authentication. I need configure API on my mimer as " VitusTotal". Which should miner I use? How configure it? Thank you
Hello! Our goal is to use AD groups in firewall policy rules that start with ABC_xxx_xxx. So I am wondering how we could achieve this without manually adding new groups to PaloAlto Group Include List. I have already tried Custom Group filter with (CN=ABC_*) but this seem to find only users not groups (Link to KB https://knowledgebase.paloaltonet...
critical18754DemonBot Command and Control Trafficreset-both8.1.0 I noticed the above threat in releas 8096.. Which says minimum PAN-OS 8.1.0... We are on 8.0.x , does that mean the above would not be applicable? Thanks Rob
Hello, Can someone please advise why our session list would have To/From port 0?
Folks,Typically when we build a IPSec tunnel from the AWS VPC to the on-prem Palo Alto box we get an option of 2 tunnel's from the AWS. I have options of configuring both the tunnels as UP/UP when the end point is something like a Juniper ISG-1000/ISG-2000 device. However, when I configured it on the PA-3260 only one of the tunnels is seen as up...
Dear Commuity,I am very new to Palo Alto Firewalls. I saw, that you can check the "Resolve hostname" checkbox when viewing Traffic Logs. Sadly a lot of IPs are not being resolved. I examed a few random samples and notices, the IPs mostly belong to Microsoft. I am now wondering, if there is some kind of way, that I could see this in Traffic Log d...
I am having a weired issue with a PaloAlto and a Telekom Router. I configured a specific client address to always use a second Router (with internet connection) to communicate to the WAN.Everything on the PaloAlto looks good to me but when I plug-in the Telekom Router into the configured interface port of the Paloalto I cannot access the Routers...
Hi All,In my scenario, i have single PA-220 for guest access. In trusted zone i would like to keep the interface lelvel (active/standby) high availablity.Interface type as L2. I couldn't do aggregate interface since it's connected to two seperate switches. How we can achieve this.?? Thanks in Advance..
I have a problem with some sites that uses DNS round robin as loadballancer.As an examble:vs-ssh.visualstudio.com This has the TTL set to 300 sec, the PA's FQDN refresh is default 30 min.So the firewall won't cache all IP's used in the round robin, because when it does a refresh the old value has timed-outSo the rule where I use the FQDN object ...
Hello, Is anyone already configured it ? We want to use STUN but the NAT seems to be a problem. David,
Helloare there any minimum requirements for PAN OS version, GP client version to successfully use SAML for GP client authentication?
Upgraded VM-ESX firewall from 8.0.12 to 8.1.4 and seeing bgp flapping to all the 3 peers.Its happening every 15sec. Checked timer match.
I have some questions on the Active/Standby deployment model. Right now I'm on A/A which requires all network config between the two units to be different since they're both active at the same time. From looking at the documentation, it looks like in an A/S model the network config between the two units is identical which includes all of the s...
OtakarKlier
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
OtakarKlier
on:
Network wifi Management
