Hi, I have question about some system reports requests. Can PAN firewalls provide config reports belonging to changes which users made? Also Can I get system resources report by historical? Thanks
I was little ambigous on how Palo alto processes a policy. let say i have a policy with 3 applications(a,b,c) in application field and multiple service ports(1,2,3) is there a chance that one of the application(a or b or c) specified in my application field is also being allowed on ports other than what it meant be allowed (say A must be allowed...
The Knowledge article on blocking TOR, https://live.paloaltonetworks.com/t5/Featured-Articles/How-to-Block-Tor-The-Onion-Router/ta-p/177648, references a list on panwdbl.appspot.com. This website has a number of lists that can be used to filter traffic, including the list of TOR exit nodes. What process is used to ensure these lists are accurat...
My understanding is that wildfire autoupdates some URL categories within 5 minutes if you have the correct licensing. With a current wildfire/URL filtering subscription, and without traps on our network, what is the real advantage to autofocus? My understanding is that it lists malicious IP's/domains/URL's, but if you have wildfire updating, an...
Want to know if anyone has configured a PA to use the RSA Authentication Manager yet? I have seen an RSA document from 2010 that states it can be done.
Hi guys, I've got about 7 or 8 VLANs that segregate my various departments. I want to inspect the traffic that goes from these VLANs to my server VLAN. What's the best way to do that? The only article I could find suggests creating a zone for each department. They are all currently configured as Layer3 subinterfaces on the same VR but this isn't...
I have set up a guest wifi network with an access point on an ethernet port of the PAN firewall. The guest wifi network is unsecured. I am using a web-form to ensure the guests see our logo, terms, and type in the correct password to proceed.The setup works most of the time. On occasion when using this setup via an Apple iOS device (iPhone, i...
I would like to configure my PA-200 in such a way that when the user tries to browse a web site, he is presented with the captive portal. On this page I would like to display a "Terms of Service" banner telling him about acceptable use etc. I do NOT wish to authenticate individual users.A simpe banner and an I Accept/Cancel button would suffice....
Hi, I have a PA-5020 in 4.1.6 and I want to upgrade it to 7.1.9 My issue is that there isn't any 5.0.0 which I can download in here. Any idea? Thx by advance.
Hello Today I configured for one of my zone insted of default-web-form default-browser-challenge.When I try to open new session on computer that isnt a Windwos AD machine i got:and when I clicked Cancel: I'm pretty sure that above message is possible to translate/personalse. Unfortunetelly in Responce Pages I can't find that option. Is is possib...
Hello Community. I have an inquiry with which maybe you can help me. This is the situation: In order to know the uptime I´m using the OID 1.3.6.1.2.1.25.1.1.0 to get the value of object hrSystemUptime. This is a counter of 32 bits and considering it´s counting in hundreds of seconds, the maximum uptime without overflow is: 2^32 = 4294967296 (hun...
i, We are having a weird behaviour with rtcp-base and rtcp apps.
can someone tell me how can we troubleshoot palo alto firewall disconnection from Panorama. I tried to check system logs but there are no enough logs to troubleshoot it. logsFW has lost connection to panorama, no log will be forwardedDisconnected from Panorama Server: X.X.X.X. , source: Y.Y.Y.YUser-ID server monitor <hostname>(vsys1): con...
Just wondering if it's possible to use an Elliptical Curve DSA cert with CA and Trusted Root to be the Forward Trust Certificate for the SSL Forward Proxy decryption feature? Reading about the Perfect Forward Secrecy feature here:https://www.paloaltonetworks.com/documentation/71/pan-os/newfeaturesguide/decryption-features/perfect-forward-secrec...
Our PA 4.1 has problems mapping entries received from user-ID agent and LDAP queries.show user ip-user-mapping command produces following output:192.168.1.1 AD grybai\vltr12345678 Here grybai is our NetBIOS domain name for domain and vltr12345678 is sAMAccountName attribute of user object in LDAP.However command show user user-IDs (which...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
