Can someone please explain me this in detail -- syn is L3 flow and syn/ack is L2 flow can not undertsand this?
I have configured GP portal under client Authen I have configured two one is Radius and other is test -- local database Radius is at top and below it is test using local database. When i use the local database account authen does not work. To make authen work via local database i have to move it up. Does GP portal supports more than two c...
we need to apply qos on citrix users coming from the internet.should i apply qos on lan egress? which application i should use for citrix?OR should i apply qos on public ip of citrix ?
I have one PA-500 connected and mostly managed by Panorama. 7.1.20.My question and goal is to add a 2nd FW and make both HA and managed by Panorama.Is there a process for this ? Step - by -Step ThanksMatt S.
Is there currently a prototype miner that can be configured and used to pull from a generic API? My example is Infoblox, but I can see this working with multiple infrastructure tools. I'm working with both AutoFocus-hosted Minemeld, and the stand-alone VM. Thanks! -Chris
we have global protect portal configured and both portal and gateway have same ip assinged.we have configured RADIUS for auth. Also under Auth profile we have Radius as a profile name When client connects he gets message GlobalProtect portal user authentication failed. Login from: Reason: Authentication failed: Invalid username or password, Auth...
I just noticed my Office 365 indicators are reporting zero for all Office 365. I originally installed 0.9.46 and it had been working great for a few months. After I noticed this I figured it had something to do with MS change from xml to json. My Palo Alto firewalls point to October 11th as the last time they saw a valid EDL. I upgraded Mine...
I have configured CP with radius passoword.When i conenct to CP internal portal IP i do not see the auth logs under monitor? is this by design?
When I commit the firewall in active firewall I can able to commit. When I commit in passive firewall it shows "Error: config push error" However I don't need to push the configuration in passive firewall I'm doing this as my HA sync is having issue. Please let me know your comments
Hi ! I'm new to the Palo Alto Firewalls. I have query about the content updates for the PA Devices has TP licenses. We are pushing updates through Panorama. Q1: I can install only one Active AV or threat updates to the firewall . Since this the new deployement , if i install with latest update is enough for us or we need to install all the upda...
When using Captive portal with MFA do we need global protect client software installed?
I have configured captive portal with MFA.Primary auth method is radius and secondary is duo-security. Under network Global Protect Portal config is done Do I need any config under gateway??????? My understanding is that we need gateway config only when we use the VPN?
We have configured MFA using CP and using RSA as Second authen. Under Network Portal Authen--------------Radius Gateway Authen ----------------Radius Under Device CP - Authen ---------RSA Why we need Authen profile under Gateway??????????should Authen profile under Portal and Gateway have to be same????? Why we u...
when i run command show counter global filter delta yes i see below counters incrementing need to understand which are these drops and why PA is dropping these packets?do they impact the performance of the PA? flow_tcp_non_syn_drop flow_fpga_egress_exception_err flow_fwd_l3_ttl_zero flow_action_close
Logical interface counters read from CPU:--------------------------------------------------------------------------------bytes received 21513660bytes transmitted 2835packets received 358561packets transmitted 21receive errors 0packets dropped 358539 is oit normal to have packets dropped?
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
