If we allow Management PRofile to Physical interface but not to Subinterfaces will be able to access the Firewall?
Hello guys, one really simple question, I hope.. when I configure subinterfaces and put them in separate zones, do I necessarly have to put also the physical interface in a zone?If yes, could be some sort of null zone created only for that? Thanks
when we say we access the website with clear text does it mean port 80?
Need to confirm on certificate if only CA option is checked then it is Public CA signed certificate? which type of cert it is when only CA option is checked?
i am trying to understand below from admin guide Without a hierarchy, you would have to configure both function- and location-specific settings for every device group in a single level under Shared. if anyone can explain me in more detail that will be much appreciated
Hello everybody, I upgraded my panorama m100-series to 8.0.13 and since this upgrade, I cannot login in my panorama through CLI and Web interface with the default admin account (Password was changed of course). When I try to log myself, it says that I entered a wrong user/password. So I created a Radius account and I can log with this account on...
Hello,I'm at a confusion regarding if it's possible for GP users to download the App with the gateways already configured for connecting so that they don't have to enter the gateway after it's installed. My use case is easier deployment for single-gateway scenarios with/without GPO. Or better said, i don't want to document the gateway for users...
we have panorama in active and passive and all firewalls are connected to it.We have m500 log collector and when i run below command sh logging status i see the firewall is sending logs to m500 also we have configured logs to be send to SIEM. 1>Need to know if SIEM logs are directly send from firewall to SIEM?how can i verify that? 2>Nee...
Hello, We've been using GlobalProtect on Windows and Mac for a long time now in conjunction with our RSA SecureID MFA appliances. We've recently started trialling the GlobalProtect client on Linux, however no users are able to authenticate against the RSA SecureID appliance via the Linux client due to a "Passcode format error". I have tried mul...
Need to know if i run this command what will it do?
Does GlobalProtect on Mac OS supports CLI mode along with GUI?
Hello, I am trying to restrict what devices users can log in to GlobalProtect with to only machines that we have given them. Since all of those machines would be domain-joined, I would expect that I can import an AD group that contains those machines and use that as a restriction, but all I can find is how to use an AD group for allowed users (...
Can you have 2 IKE gateways connect to 1 IPsec tunnel?
Hi, I would like to know by security / audit issues if the captures that are made automatically when detecting a threat on encrypted traffic are stored encrypted or decrypted. So, PA is storing pcaps when enable ssl-decrypt about this traffic?
Is there a PA best practice regarding how to handle Vulnerability Protection signatures with severity ratings of high in custom profiles? Should rule actions be Drop, Reset-Both etc
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
