Hi expert, I got alert on system log is critical about event type user-id on Palo alto " registered-ip-update-failure" follow as below I have wondered with the log is mean? please suggest me.
Getting this warning on several PA-820's running v8.1.2 and v8.0.9."Commit Warning: Profile compiler : app http2 not found (Module: device)" I'm not using anything called "http2" so not sure why this is popping up all of a sudden.I'm ignoring, but just wanted to post it here in case anyone else is seeing it? Commit Warning
I have downloaded the MIB's but cant find anything which would enable me to monitor the status of an IPSec tunnel. Is it possible to monitor IPSec tunnel Up/Down via SNMP?
Is or has anyone else had the problem with applications and services being ignored in rules? I have had an issue from all version from 7.0 to 8.1. I have stopped using applications in rules all together because it will not identify the application and instead mark it as "not-applicable". I have the problem with services as well. For example I wi...
Hello guys, I need to create additional virtual system on a 3020 cluster. Said that I have installed a regular multi-vsys license, I have enabled the multi-vsys capability (Device-Setup-General) on both devices.Now on both of them the HA state (active-passive) is SUSPENDED with the "multi-vsys mismatches with peer" error.But apart from enabling ...
Are the routes configured on the gateway for globalprotect advertised to a non globalprotect client? Like cisco or a native client?
Coming from an ASA back ground I am trying to learn more about troubleshooting in the PA. From what I learned so far there is no command in the PA that tests the full path of communication similar to packet-capture in the ASA. When in CLI I see there is a test command that breaks out different components of the communication path. I can test ...
Hi All, I have a client who asks me if it is possible to generate a report (for example, an annual report) where part of the records are stored in a Syslog.My question is, can the FW extract information from the Syslog to create a report?I appreciate your help.Regards
Our panorama is in Legacy Mode with no additional disks.We are planning to do two things.• Adding another 2TB disk for logging • Change it from Legacy Mode to Panorama mode.I’d like to know the best order to follow. Can we add the disk first (which will also start moving the logs from the system disk to the new disk) and then change it to Panora...
Hi all, What is the latest most stable globalprotect version ?? Thanks,Lakshitha.
Hello community, Does annyone know a manual step-by-step on how to configure captive portal with Pan-OS from 8.0 with authentication rules. the admin guide seems not to clear to me. I´d like to configure captive portal in redirect mode. Does anyone know a manual or you can point out in brief what elements do I need to make this config? Thanks in...
I can’t seem to get this working. I’m trying to block bbc I player but neither url filtering or APP-ID does the job.Do I need to enable ssl inspection to block https pages?I have tried with httpvshttps.com for example and I can block the http version but not the https version
Hi, Following topology is from PAN's design guide for A/P OSPF setup.I wonder if it brings any benefit to connect firewall1 to Edge Router B andFirewall 2 to Edge Router A with additional cabling run OSPF there too. The only thing I can see is that there won't be a firewall failover but routing protocolwill re-route the traffic via RouterB i...
HiIn PAN-OS FW we have user based authentication enabled. Now i found teamviewer is not working. I have allowed PORT 5938, 80 & 443. Thanks..
I am trying to commit changes to a Panorama and then have changes pushed to the firewall making API calls from a powershell script. Using the API I can:add the firewall to the panoramaadd the firewall to an existing template in the panoramacreate a new device group on the panorama and add the firewall to itAdd rules (policies) to the device grou...
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
