Is there a way of exporting Application groups from one Panorama and importing to a different Panorama? I am trying to move my groups over for a GPCS POC. NOTE: GlobalProtect Cloud Service has changed to Prisma Access.
I have a IPSec tunnel up where the Peer IP is the same as the Remote IP (Proxy ID - Remote). The Tunnel is up, but traffic destined for that Remote IP isn't traversing the tunnel. Typically, there is a Private IP as the Remote and a static route could then be set in Virtual Router to send the traffic back across the tunnel. I'm sure I'm not t...
Public Cloud Server certificate validation failed. Dest Addr: wildfire.paloaltonetworks.com, Reason: self signed certificate in certificate chain”. Require assistance to resolve this issue. Thanks in advance.
Hi Team, i have seen two diagrams of packet flow from palo alto website. in Below NAT Policy evaluated is shown in first step. which is part of Network processor (slow path) and NAT applied after Application and security Policy it means from security processor it is again sent to network processor for applying NAT. which says that packet is pa...
Hello, We have 500 users on site and currently using Agentless User-ID with PANOS 7.1.7 We are thinking of scaling up to Agent based. Can someone please guide me to a link/article that discusses the Pros and Cons of both? What are the common issues one facing with Agent based? Are there any limitations? etc. Thanks in advance!
I'm getting the below message in my minemeld logs and not sure what is causing it 2018-07-11T00:30:28 (16652)config._destroy_old_nodes INFO: Destroyed nodes: [_ConfigChange(nodename=u'Amazon_IPv4_Agg_General', nodeclass=u'minemeld.ft.ipop.AggregateIPv4FT', change=1, detail={'inputs': ['Amazon_AWS', 'Amazon_CloudFront', 'Amazon_EC2', 'Amazon_...
We have configured NTP server on the network which synchronizes with Australian/Melbourne time. So all devices including firewall configured with the NTP server. but all other device showing correct time as per NTP Server but Firewall show incorrect time by entering "show clock" command though firewall synced with NTP server display in "show nt...
How can I modify the Security Policy default columns and order for all users, not just my view?
Hello, I've bought a refurbished PA-500 for my lab.Is it possible to get current PAN-OS images for this device? Regards,Martin
On our "SKYPE" rule I have removed web-browsing, this causes dependancy warnings on commit. I read this "solution" https://live.paloaltonetworks.com/t5/Management-Articles/Application-Dependency-Warnings-with-Allowed-Enabler-Application/ta-p/55142 But not sure if it's correct or makes the rule insecure? Rob
Can you add a user group under the user tab in a security policy
I think I've asked this but can't find the thread. What is the recommended way to get some kind of "Top Domains Visited" report?Everything seems to default to rdns of the endpoint which is not much use sadly with cloud/online content providers i.e. your users visit Amazon/BBC but the resolved destination is node-17-cluster-5.eu.akamai.com and s...
HI All expert my panorama M100 having an issue with disk space 95% in used need to clean up. I tried to delete all the core file and all the software and patching download but the Alarm still remain. Tried to monitor few days but it's still there....and keeping increase. Is that anthing i could to for clean up the disk space?
Hi, I was wondering if we would have the option to anonymize our monitoring reports.with anonymizing reports I especially mean by graying out the username or change it by ip address in automated / schedulded report Thank you in advance
Hi I gave a rule that allows snmp-trap messages to my SNMPD server. for some reason PA complains that SNMP-TRAP needs SNMP-BASE. Now if I add in SNMP-BASE this is going to open up port 161 where as trap uses 162. So why do i need SNMP-BASE
