Hi Is there some reason that PA have a 1 hour keepalive value, where linux has a 2 hour timeout value. Whats considered best practices ... reset the PA to 2 hours or bring down the linux keepalive value to say 1800 A
I am having a problem trying to push Apps&Threats or AV from the panorama to the firewalls. We have a Panorama M100 at 8.0.5 (recently upgraded from 6.1.10) with 5020 FW's at same release. We are NOT able to do the reachback to Palo Alto servers since we are a segregated testing network. When i go through the process to push the Apps&Thr...
Have followed all the articles I can find. Trying the ISO, I can login and basically gets stuck right after login at "initializing minemeld, this can take some minutes......", and left it for minutes/hours/days, just never finishes. Tried canceling out and checking if its running and get some other errors about "no module named datetime". Cou...
Hello,could someone explain me what means this counter, please?The total number of dynamic_ip_port NAT translate calledthank you in advance
I've just installed Palo Alto firewall VM version in virtual box.I was able to access it via WEB (https) and SSH.However, when I check traffic log it was empty. I generated a few traffic such as ping and nmap scan against firewall IP, but still no traffic log appear in it. log-receiver statistics shows 0 traffic logs written meaning no traffic ...
Hello All,I am currently trying to integrate the cisco ise (radius server) to the Palo Alto Syslog filters so that the users that be tagged and policy applied to different categories of guest based on ISE permission.Currently ISE seem to be sending authentication logs to Palo Alto but cannot seem to build the right regex to pull the relevant inf...
Hi, Is there any document for Palo Alto configuration to integrate FW login authentication with Cisco ISE.
Hello, I apologized if i posted i the wrong area. To start off with, we just got our PA-820 recently. We have a weird issue, where one day an application will work without problems and another day the Instant Messaging part of the app fails to connect. I looked at the logs yesterday when it wasn't working and noticed a lot of logs in the traff...
Is there a way of exporting Application groups from one Panorama and importing to a different Panorama? I am trying to move my groups over for a GPCS POC. NOTE: GlobalProtect Cloud Service has changed to Prisma Access.
I have a IPSec tunnel up where the Peer IP is the same as the Remote IP (Proxy ID - Remote). The Tunnel is up, but traffic destined for that Remote IP isn't traversing the tunnel. Typically, there is a Private IP as the Remote and a static route could then be set in Virtual Router to send the traffic back across the tunnel. I'm sure I'm not t...
Public Cloud Server certificate validation failed. Dest Addr: wildfire.paloaltonetworks.com, Reason: self signed certificate in certificate chain”. Require assistance to resolve this issue. Thanks in advance.
Hi Team, i have seen two diagrams of packet flow from palo alto website. in Below NAT Policy evaluated is shown in first step. which is part of Network processor (slow path) and NAT applied after Application and security Policy it means from security processor it is again sent to network processor for applying NAT. which says that packet is pa...
Hello, We have 500 users on site and currently using Agentless User-ID with PANOS 7.1.7 We are thinking of scaling up to Agent based. Can someone please guide me to a link/article that discusses the Pros and Cons of both? What are the common issues one facing with Agent based? Are there any limitations? etc. Thanks in advance!
I'm getting the below message in my minemeld logs and not sure what is causing it 2018-07-11T00:30:28 (16652)config._destroy_old_nodes INFO: Destroyed nodes: [_ConfigChange(nodename=u'Amazon_IPv4_Agg_General', nodeclass=u'minemeld.ft.ipop.AggregateIPv4FT', change=1, detail={'inputs': ['Amazon_AWS', 'Amazon_CloudFront', 'Amazon_EC2', 'Amazon_...
We have configured NTP server on the network which synchronizes with Australian/Melbourne time. So all devices including firewall configured with the NTP server. but all other device showing correct time as per NTP Server but Firewall show incorrect time by entering "show clock" command though firewall synced with NTP server display in "show nt...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
