Hello everyoneWhat are the normal working temperature for palo-alto pa-820, pa-500 and pa-3020 ? It seems that it's beyond to the normal specifications ( above 40 °C )Thanks's you for your answer
There was a massive outage on Microsoft sites. It has been resolved now, but I was wondering if this something related to Palo Alto Dynamic updates.https://www.reddit.com/r/sysadmin/comments/9nc9oj/microsoft_authentication_issues_with_akamai_ips/We just got nailed this morning with issues caused by Palo Alto Firewalls adding an Akamai IP/IP-rang...
Hi, we have an autofocus instance with MineMeld application enabled. I'd like to call this Minemeld's API in order to get some metrics for our internal reports about Intel. With self-hosted Minemeld is easy, but, is it possible with AutoFocus-Hosted application? I don't know the URLs to make the request, the user or authotization header to ...
I am getting fatal on both, new to Minemeld and cannot seem to figure it out. Traceback for each is attached. Much appreciated. Chuck
We have some issues for some users with the globalprotect vpn to connect to our PA-3260 firewall.To solve this issue technical support told us to upgrade to our PanOS from 8.1.2 to 8.1.3.We did this morning and everything went fine till 1PM.From some users we received there was a connectivity issue to internet, other users told us they couldn't ...
Has anyone used these Cisco QSFP adapters for the QSFP and HA2 ports? Officially not supported but they will probably work as they support the same QSFP standard. The PA5220 HA2 uses an HSCI/QSFP port. We want to use a Cisco BiDi QSFP Transceiver here:Solution with Cisco 40-Gbps QSFP BiDi TransceiverThe Cisco QSFP BiDi transceiver, shown in Figu...
Is the VPN portal inside or external address
Hello, I am unable to contact updates.paloaltonetworks.com or staticupdates.paloaltonetworks.com Based on the following articles I should be able to ping the two addresses as part of my testing. https://www.paloaltonetworks.com/documentation/80/virtualization/virtualization/license-the-vm-series-firewall/activate-the-license/activate-the-license...
Hello,I’m new to the Palo Alto community. I’m hoping someone would be able to help me with this problem we are having.We have a Palo Alto PA3060 firewall that has a Layer 3 interface configured with a sub-interface that is also Layer 3 and tagged with VLAN250. The sub-interface is assigned an IP address of 192.168.250.1. On the other end of the ...
Is anyone using the URL filter in replace of a proxy? I made this attempt but ran across an issue with user I’d mapping not being mapped accurately or fast enough and it was causing issues with users being allowed internet access. I want to only allow a certain AD group internet access. Has anyone been successful with this?
What is the recommended config for the split tunnel for pre-login? Our users when authenticated are fully tunnelled back to us.
@reaper @BPryIs you create an allow rule and then select to negate the destination IP's does that mean those IP's are blocked?
I have purchased a pair of PA-3220 to run as internet gateway. I planned to configure active/passive for HA but I got the status that the HA-2 link is down and I found on website we need to use HSCI port as HA-2(Data Link). Unfortunately, I haven't purchase any cable or sfp module for HSCI. So, there are any option to configuer other port as as ...
Hi I have configured GP agent with internal and external adresse to seamlessly work w/ always on for my endpoints and this works great. And users can not connect to other networks w/coppper cable without the internal GW. And SSID has to be punched in manually. But one challange;How do i protect new endpoints when its getting windows image from ...
Hello Experts - Can you clarify how to configure Paloalto firewall to source traffic from Data Interface rather than Management Interface Scenario: When Firewall send syslog message to exernal Syslog Server, the Firewall has to be configured to have Source IP address of Internal Interface instead of Management Interface. It is similar command in...
