FileZilla & SSL Decrypt
The auto-update feature in FileZilla will break if SSL Decryption is turned on in the firewall. The following URL must be excluded from decryption:
update.filezilla-project.org
Discussions
Resolved! Panorama Virtual Appliance V.8
Hi Guys,
I wanna update our VM panorama currently running the v 7.1.10 to version 8.
my Panorama currently manages less than 10 Devices.
Could someone provide me with the requirements (like storage, CPU, RAMs) i need to consider?
P.S : Not having
...what OS is PA built on
Does security management require alot of linux, unix and ubuntu knowledge and software?s
Resolved! Miner to collect AWS IP
I would like to setup a new Miner to collect AWS Ips from the following http://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html, using URL https://ip-ranges.amazonaws.com/ip-ranges.json. How would that be accomlished, I can't seem to locat
...Resolved! Global Protect 4.0.2 -19 only connects with Windows Administrator Account
Hello everybody,
recently I am facing a strange Problem with Global Protect.
If I log into a Windows 7 Machine (64-bit) with an Administrator Account and enter Credentials of a NON-Administrative Account in Global Protect everything works just fine.
B
...Resolved! Importing a WildCard SSL to use with GlobalProtect
Hi All,
Im trying to import a WildCard SSL to use for our Palo Alto GlobalProtect VPN. Im Having some trouble as this is my first time using SSL. I can import the WildCard but im not able to link it to its Root CA (GoDaddy). Do i have to have this si
...DNS proxy to GP clients
DNS configured in GP settings: Primary DNS 10.250.1.1, secondary DNS 10.250.1.2
Access route: split tunnel- 10.250.0.0/16 allowed in GP.
Once clients are connected to globalprotect, they are getting the above DNS settings. so the traffic going to int
...Multiple Certificate Profiles in Panorama?
Does Panorama 8 support the creation and use of multiple Certificate Profiles for administrator authentication into the Panorama web gui? If so, what else is needed to support the use of multiple Certificate Profiles? Does each Certificate Profile ne
...Resolved! GP Clientless VPN setup
Hi, i have a PA200 for a testing purposes i want to enable clientless VPN access. Went to Device/licences and i see i do have a licence enabled.
then going to Device/dynamic update i do have clientless software uploaded:
but when i try to activate it
...
New miner assistance
luigi,
Kudo's on Minemeld. We are slowly migrating to a PA enviornment and recently created an internal minemeld for our security team. I need your assistance creating a new miner that pulls data from one of our security partners. Due to sensitivities
...How to download Panorama?
Can anyone redirect to the lkink to donwload Panorama?..can';t see it under Software Updates in support account.
URL Filtering of Active Sync
Hello
There is some problem concerning url filtering of Active Sync.we create url rule which must allow Active Sync but it doesnt work.we exclude this rule it is working.is there any particular configuration about Active Sync?
Resolved! Palo Alto global Protect setup issue
Hi All,
I'm currently trying to set up an SSL VPN using the global protect client on a Palo Alto FW.
I have:-
- issue a self signed root CA and CA to the palo
- set up VPN tunnel
- created VPN zone
- setup an authentication profile using RADIUS and directe
...Resolved! Response pages not always presented to users
My response pages work when users attempt to browse to a blocked category but when the blocked item is buried within the page users just get a blank screen until the connection times out.
Any ideas or suggestions would be greatly appreciated!
Thanks!
Zone Protection Profile - testing
I've setup a Zone Protection network profile and applied it to our DMZ zone. I changed the default for port scan on the Reconaissance Protection tab to 30 events in 3 seconds. TCP port scan is enabled, and the action is set to block-IP.
I run a tes
...
-
OtakarKlier
on:
Is PA capable to scan for malware in Activesync/Outlook365 traffic?
-
BPry
on:
security policy in monitor mode only
- M.Anderson on: Minimum Code for PA-415/445
-
BPry
on:
The machine on which Cortex XDR agent is installed is not showing the Windows key (Start Menu) option.
-
BPry
on:
GP Compatibility on Windows Server
-
OtakarKlier
on:
Factory Reset
- Netzer on: Firewallupdates via Panorama - huge delay in download and install
-
Raido_Rattameis
ter on: Problms with VPN Global Protect - Param_Upadhyay on: Commit Timed Out from Panorama
-
TomYoung
on:
SSL Inspection and SSL Labs
Copyright 2007 - 2023 - Palo Alto Networks