what is best way to protect the DNS servers against the resource exhaustion because of denial-of-service attacks ? should we use zone protection or DDos protection?
Hi Any one know how to get the dhcp server to register addresses with MS DNS ? or is this a feature request ? A
Hi Folks, I'm currently trying to setup LSVPN between our various sites (with the help of the PaloAlto guide and YouTube video!) but was wondering if we could use a Loopback interface instead of a physical Layer 3 Interface? We currently use this with our standard GlobalProtect VPN (which works perfectly fine!) and I would imagine this is much t...
Need to know if we use application instead of service in security policy When we use service then that will enable the firewall to take immediate action with the first observed packet based on port number. When we use "application" in Rule that will allow the firewall to take action after enough packets are allowed for App-ID identification ...
Greetings all, My organization is looking to upgrade from an Active/Active 5060 deployment to an Active/Standby 5200 series deployment. I have Expedition installed although I'm not perficient at it yet (side note: If anyone knows of and can pass along any tutorials on using it to capture data and create migration rulesets to move ip/port rules ...
I have a pair of PA3220 firewalls in my environment. I configured Active/Passive for High Availability and I configured Link Monitoring condition to trigger the failover. However I'm still not clearly understand the behavior of PA HA. I configured a Link Monitoring Group on both Firewall as below- Name INSIDE - Condition ANY + Interfa...
I have a Lab PA-200 that I have been upgrading to the latest version of PAN OS for testing.I have been uploading the OS file and upgrading for a while.The 7.0 file worked fine. After the alert about 7.0. I attempted to upgrade to 7.0.1.No joy. In Firefox and Chrome the upload dialog just sits there forever.With IE 11 it finally gives the error: ...
Hi!In my company we are using GlobalProtect VPN's as a medium to access the network. Right now we have a blocking procedure by which if a user fails 5 times the password while trying to login, his account gets blocked for 15 minutes.We are using this -> https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJ2CAK Recently...
Hi to everyone. I'm new here and I have a issue as follow: Installed MineMeld on centos 7 in my lab environment and everything goes smoothy. Now I'm trying to deploy on AWS server with same OS but I got the erro executing ansible-playbook. TASK [minemeld : minemeld-webui repo] *********************************************************************...
Need to confirm if we enable ssl decryption will that put load on MP? https://www.reddit.com/r/paloaltonetworks/comments/8s9gay/ssl_decryption_causing_high_management_plane_cpu/
I am currently on OS 7.1.19 and am planning my upgrade path to the best version of 8 sometime soon. In order to upgrade do I have to install the base 8 version or just download it?
Supporting VPN for people is a challenge no matter what VPN you are using but people never consider the reliabilty of their own ISP provider as part of that issue. So what is the best way to rule out the users ISP as the problem and not the globalprotect client/VPN access? But to be fair I do not want to rule that out either . This my users comp...
Hi, Is it possible to upgrade PAN-OS manually without licence ?
Does anyone know any free External Dynamic Lists for DNS signatures to use in conjunction with the Palo DNS Signatures? We would like some extra protection for our anti-spyware protection.
What is the best way to monitor an IPSec tunnel on the PA, I don't see anything in the traffic logs at all just the systeme logs
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
