Hi Team
Should HA fail-over occur if the root partition is full on Active firewall, causing the outage ?
Case 00590455
PA-5050
-----------
Root partition was 100% full and firewall was not allowing new Global Protect connections. PA Engineer helped him
I have a report which has been working fine for ages then it has just stopped, possibly when we upgraded from 6.1.14 to 7.1.6
The report has just stopped returning any data, so I looked into the query string and found that one element of the query see
...
Dear Experts,
I was wondering that shall I enable IP Spoof Protection on Untrust Zone, as it identify the source IP address as per routing table. Any request coming from Internet will have some public IP address (Normally) and PA will not have those
...
In Paloalto lasted version. Paloalto can block zip file and allow compressed Office documents (Ex.docx, xlxs). If not Paloalto have any roadmap for this requirement.
Thank you.
Hey guys,
I have a strange problem:
I have a security rule that allows google-base and google-play.
However, in the logs the google-base app is denied with the imlicit-deny rule at the end.
The firewall doesn't find my allow rule?
What is wrong?
For our website we host a database in our DMZ network. When we recieve a lot of calls from the website to the database the connection get a reset because the firewall see this as an attack (40031). Is there a way to configurate that the firewall allo
...
Hi All
i would like to seek and advice from you all regarding the palo alto firewall and panorama integration
we have deployed 2 pair palo alto firewalls 1 pair in DC A and 1 pair in DC B.
now we want to deploy the panorama so for the common rule we c
...
Hi Folks,
How can i allow only facebook's workplace(https://workplace.fb.com/) ?
i have configured url filtering but still no success.
Url filtering have configured like below:
Out of curiosity is anyone using Save Filter and Load Filter options under Monitor tab and find them user friendly?
I have mentioned to Palo representatives few times that filter field should have droppdown history like browser address bars have but t
...
Folks.
I have a normal Global protect portal for internal staff which works fine.
I now have been asked to provide access for a support organisation which is not staff - not employed by our company - but which needs access to certain devices inside o
...
Scenario is we have ISP connected to Outside zone.
DHCP server on Inside Zone.
On Each satellite we have DHCP relay configured to readh DHCP server.
Whenever there is any issue with Power at location where interface connected to inside zone goes down.
Tr
...
Mac book throws untrust certificate after user identification timeout.
MAC Book unable to operate with Kerberos authentication. If working, provide configuration details.
The scenario is just allow user access system directly, deny all if using forward or reverse proxy such as nginx、apache2、liqud and so so??
What should i set? Application or other else?
Hello,
We would like to report on web browsing based on the IP off the user's computer, not username (or Identity). Can someone offer a guide, or point me in the right direction? Thank you.
TomYoung
on:
Admin Test
BPry
on:
How to set Portal address in Global Protect using powershell
Astardzhiev
on:
Global Protect authentication happened two time while using RADIUS
BPry
on:
Unable to manually upload PAN-OS software into the firewall getting "upload file size exceeds system limit error"
BPry
on:
9.1.14-h4 and subnet shared between multiple vSYS
BPry
on:
Software NGFW renewal, more credits needed for same deployment profile
BPry
on:
Global protect disconnecting every 15 minutes after the panos upgrade from 10.1.5 to 10.1.6-H6
