Hellothere are some problems with particular web sites.For example live.paloaltonetworks.com ru.wikipedia.com
Hi all i need to prevent all downloads on a network using Palo alto without affecting browsingi created a file blocking profile , denied all extentions in the download direction and applied it in a policybut iam still able to download many exe and jpeg for examplei dont have a decryption policy in placeis it necessery ??
Hi everyone i have two ISPsinterfaces connected to my palo alto i need to make a pbf forcisco vpn client app traffic to cross through the second isp in the pbf section in policies , i set the application to cisco vpn and ipsec-udb and IKE and set the destination and next hopbut traffic still go through the first ispwhat am i missing?and is it ...
Hi, We can not identify GP users in a remote FW. We can see all AD mappings but not GP. I explain the scenario: INTERNET ---------------> FW Central (gateway GP) -----> MPLS --------------> Remote FW PALO ALTO both PA are integrated with LDAP, but not have userid agents.We can see the AD users in both PA, but when a user is connecting ...
I apologize if this has been answered in previous posts, I've tried searching and it seems that I'm getting bit and pieces but not the whole picture. How would I go about creating my own list of IPs and then customizing Minemeld to mine \ gather the IPs to be used in an EDL. We have McKesson products and they recently send us a PDF with a l...
I am new to PA & I'm trying to understand the necessity of log collection to a Panorama VM. My company is about to deploy PA-3220's in HA pairs in several data centers. We have a single Panorama VM getting deployed for 6 firewalls (3 HA clusters). Coming from a traditional ASA background logging is set up either to go to syslog server or ...
Hi i need to create a qos policy to limit downloads and uploads of user addresses objects created on palo alto device i know that i will ceate a qos profile for down and up , choose a class , priority and type guaranteed and max BW then create a qos policy and qos interface 1-regarding the qos policy , do i need a policy for upload and policy f...
Is the session is long live ( some applications like nfs,panorama) will start and last till 1 month.As we have configured log at session end, the log entry will be created once the session is ended.However we have configured netflow as well.Netflow is also reporting data to netflow server once the session ended on firewall ( which is 1 month lat...
Hello,sorry for a dumb question but I am new to PaloAlto and I would like to understand the TAP mode on a physical PA firewall. We have Cisco Catalyst 6509 switch running in 1 of the offices as a core. PA firewall is used for users' internet traffic and it is directly connected on that switch. We need to find a way to mirror traffic going throug...
I have recently upgraded Panorama from 7.1.x to 8.0.8. Although there are no changes and all firewalls are "in sync" for the configuration, the Panorama "Commit" button is Green/Highlighted. Is there anyone using Panorama with 8.0.x and seeing the same behavior? Until 7.1.x, the green/highlighted butting always meant pending config push/non sync...
I am considering upgrading from 8.0.x to 8.1.x, but this issue seems like it might be a show stopper. In 8.1.x known issue PAN-89471 "Firewalls reboot because the userid process restarts too often due to a socket binding failure that causes a memory leak. Workaround: Terminate the process that is using port 5007." This seems to read "userid caus...
Hi, i have a very strange issue. I have a webserver protected by a palo alto NGFW, if i disable inbound ssl inspection policies everything works fine and i can access the server as intended. However when i enable the inbound ssl inspection policy, with the proper certificates imported in the NGFW, i always get SSL version/ Cipher suites errors ...
I cannot read AD logs on Windows Server 2016 with the event viewer read group access. Is there anything special that needs to be on Windows 2016 Domain? Thanks
I want to use Panorama to perform dynamic updates for the "Antivirus" and "Applications and Threat" sections.On remote firewalls, I configured Panorama as the update server.I also scheduled the automatic update via a template.In Panorama, I have the latest versions of "Antivirus" and "Applications and Threat" installed. However, they are never d...
Hi, We have something strange in our firewall. We have a client/computer with Sonos software and the software need to update. When we click update in the software we get a message that something is wrong. So I checked our firewall and in the monitor I can see that the update needs to get pulled from akamai and it is denied. So I created a rule t...
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |
