Hi, I would like to change the text for this GP Agent error in this notification: Where the GP agent obtains this text? how can i change it?
Hello, I have a setup like this to provide some redundancy to a PA-220 firewall but have some questions about how to best configure. What I have tried doing is setting PA-220 Port 1 and 2 to be Layer 2 with a common VLAN vlan.200 with the IP as shown. This has worked fine. Port 1 is connected to a Cisco 9200 configured as an access port fo...
There seems to be an issue displaying the globalprotect window in Linux with certain monitor configurations. I have a small primary monitor and a large secondary monitor, placed like this: The globalprotect window tries to display in the bottom right corner of the total monitor area and is offscreen to the right of monitor 1 and completely inacc...
I have an IPsec tunnel set up between two PAs. Everything showing green and I can ping between the two networks. My problem is that whenever I try to access a Docker container over TLS through the tunnel I receive a TLS handshake error, connection reset by peer. I have tried a variety of fixes including changing the Docker network settings and l...
To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...
I have a question about the PA NATing. I have 8 different internal zones within my test lab. Each zone is either assigned to a physical interface or a sub-interface. Would I need a separate NAT rule for each zone to be routed to my egress port (WAN) port? Looking to keep everything neat and simple. Lastly, if that NAT traffic is coming back int...
Hello everyone, I have created a security policy that logs only IPv6 traffic, and I added a log forwarding profile to ensure I receive an email whenever the policy is triggered. However, the issue is that when I send IPv6 packets, I don’t receive any emails. My email server profile is working fine. When I test the connection, I receive the t...
Hi Team, I am planning to configure the new firewall using ZTP and also planning to manage this firewall completely via SCM. Add a ZTP Firewall to Strata Cloud Manager Following the above link to add teh ZTP FW to SCM. > Need to know where will i get the Claim Key? Here it asks for both Serial No and Claim Key. > If i activate the licenses...
Hi All,Is it possible to generate "email" alert when any user reaches the defined bandwidth threshold?Eg: Defined bandwidth threshold is 1 MB, if any user reach or exceeds the defined bandwidth threshold then the device should trigger a email alert to administrator. Note : I don't want to restrict any user to 1MB, but need onle alert if he excee...
Hello all,I have downloaded Dynamic update version 8634-7663, but the commit function does not work.Is there any bug about Dynamic Updates Version 8634-7663Thanks,
CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?I have 8 anti-spyware profiles across about 10 HA Pairs - 2 predefined and 6 custom. All in "Shared", not a DG. Any references that would be able to be in a template are likely in a template.It seems to me that until I can get my departments to give me upgrade windows I should s...
Hello, Most of our users are running Teams in a Office 365 on Windows laptops, from a network perspective it is just a connection on different ports to random hosts within 52.0.0.0/8 subnet. The problem we have is with udp/3478 port, some portion of it is STUN, some been identified as MS-TEAMS-AUDIO-VIDEO with latest app-ids. As mentioned i...
Hello, We have updated 10.2.6-h3 to 10.2.8-h3 earlier and recently to 10.2.10-h9 but in both times we had to do rollback to 10.2.6-h3 because our websites stopped working. Everything else seemed to work except inbound traffic to these applications. Traffic totally stopped. Not even one hit in traffic log after update. Have you seen anything ...
One of the more useful features in troubleshooting on the PIX/ASA (which we used until recently) is the packet tracer, which allows us to enter source/destination IP/port, etc and check to see if a given connection is allowed or blocked, and by which rule. Is there an equivalent feature in the PA units?
I am unable to access the firewall through both the GUI and CLI modes, but the internet is functioning properly. The firewall gateway is located at 192.168.0.1, and it is reachable via ping.
Raido_Rattameis
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
