When I try to uninstall GlobalProtect "the Feature You Trying to Use in on a Network Resource" shows and cannot uninstall it.Does anyone have a solution?
Hello, all I am testing Anti-Spyware DNS sinkhole. I set: I make policy with this profile. For most DNS-names in category “Malware” и “Command and Control” (https://threatvault.paloaltonetworks.com/) i see nslookup answer, for example: Addresses: ::1127.0.0.1And it is good. But for two DNS-names: namecha.in, 4cdf1kuvlgl5zpb9.pmr.cc (Malware cate...
Wildfire question need to know what is purpose of checking Report Benign Files Report Grayware Filesunder device and wildfire?
I know this is a frequent question, but I've not seen one particular aspect of it. I need to upgrade from 7.0.1 to 7.1.x (the latest). Am I correct that I would do the following: Download and install 7.0.19 <- this is my main question- can I go directly from 7.0.1 to 7.0.19 or is there an interim version needed? rebootDownload and install 7....
CLI shows Session 33880958c2s flow:source: 10.29.32.146 [_DMZ]dst: 65.55.163.76proto: 6sport: 59760 dport: 443state: INIT type: FLOWsrc user: unknowndst user: unknowns2c flow:source: 65.55.163.76 [_EXT]dst: 198.160.191.5proto: 6sport: 443 dport: 32999state: INIT type: FLOWsrc user: unknowndst user: unknownqos node: ae1.3741, qos member N/A Qid ...
We have set up a GP slit tunnel we allow SSO using LDAP and Certificate based authentication this allows access to everything in the corporate network. However for applications we have specifically listed by service and destination we have created additional authentication rules that force the user to authenticate using a MFA (Entrust) method th...
Is there a way to pull the UserID information from the Palo alto logs concerning VPN users?
Hello everybody, I would like to know what happen if I don't configure the Expiration Period in my Collector Group. By default, blank field means that my logs will never expire but if it reachs the maximum capacity what happen ? Does my panorama take in consideration my Quota and override the oldest logs ? Regards,David
For globalprotect I have a radius server profile with two servers in it. I have noticed that all authentication goes to the first server in the list all the time. And that works. However, in testing, I have shut off the first server and the firewall never tries to send authentcation to the second server. If I use the "test authentication" co...
Hello everyone, the users in our company use Google Hangouts / Meet. We allowed google-hangouts and google-meet and all the dependent applications with Service Any.However the connection is recognized as ms-lync!! Anyone else facing similar issue? Best Regards,RJ
Hi ! How we can configure the HA between Firewall through Panorama. I have added the both devices in to single device groups. So whenever i did the HA configuration parameters it's getting applied to both devices . What are the steps need to be followed for this ? Thanks in Advance...
My idea was first to setup panorama to monitor the logs for critical and then send snmp trap.But from what i can see from the PA mibs, there are no way for panorama to send info in the trap about the device? So all i see in the trap is the panorama ip. Is there any way around this? Or is maybe best practise to trap from the individual device?
I have configured qos on application http-video only and category is any.Running OS 8.0.9 On qos stats graph it also shows application as unknown-tcpfrom cli when i run command > show session all filter qos-class 1 it shows application as undecided need to understand qos rule only applies application http-video why we see applications unkno...
We have a PA-3050, I have setup LDAP auth and it is working fine, however I have a question/concern. Yesterday we had a user offsite who needed VPN access, he was not in the AD group initially, so I added him to the AD group and sent him instructions on how to download the agent, when he tried to sign in, it would not allow him, ten or so mins ...
Hi i have two separate PA-220 clusters in separate sites and i can connect to each one independtelly via global protect, but i have to choose one site or the other. is there a way to setup the Global protect to connect to both sites at the same time without the use of a VPN satellite setup? the networks are not overlapping.. thanks,Jonathan
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
