I am planning to bring in a new ssl decryption appliance to my current network. How can I guage the ssl throughput on my curent PA-5020 to make decision on right size of appliance? TIA
Hi everyone, I've honestly poured over the forum, the FAQs, the How-Tos and the all knowing Google search to find an answer to my questions. Background: I've customized a login page and added some styles to it and I have included a DIV tag that has some instructions for the user. I figured out the login form gets injected into the pan_form ta...
Is there a way to search for one IP and all the places it might be blocked on the firewall?
Hello All, I am tring to setup Minemeld on aws with help of below mention article, however no success. https://live.paloaltonetworks.com/t5/MineMeld-Articles/Running-MineMeld-on-Amazon-EC2/ta-p/72039 Request, if someone help me in setting the platform. Thanks in advance.
I use panorama to configure and push policies as well as log forwarding (to the panorama) for all my firewalls. I now want to send all those logs (traffic, threat, data, etc..) to a syslog server as well but running into a problem when doing this. It seems I can't push/create a syslog server on the PAN and add it to the 'panorama log forwardin...
Hi Brothers, Plz help me, i have a scénario wich i must configure every interface with its own Virtuel router, and i need to make routing between this virtuel router. Ex:Ethernet1/1 has VR1Ethernet1/2 has VR2How i can make routing between VR1 & VR2 ?? plz your help
The weblink on my PAN devices is going to the old website https://urlfiltering.paloaltonetworks.com/testasite.aspx so I get a page not found error. How do I update this weblink to go to the new website which should just be https://urlfiltering.paloaltonetworks.com. Here is a screenshot of the weblink I am talking about
Hello there 🙂 Following situation has evolved on our company network and I'm not 100% sure it's the best solution. As system engineers we use the GlobalProtect to login to work and do our things. The setup: ISP1 ----active/active---- ISP |PA3050 ----active/passive---- PA3050 Very straightforwa...
Hi everyone, After reading the topic "How to Troubleshoot High Dataplane CPU", I realize that my PA 220 got no information on Core 0 and 3. Anyone meet this case ? If this is an error, I need to open a support case ?Thanks in advance for your help. Best regards,Mr. Tuan
Hello,I would like to know if there's way how to "chain" multiple variables after pipe in some command to filter the output, something like:<command> | match <param1>|<param2>For example:show running security-policy | match index|source|destination|application I tried to play around with quotation marks, brackets and so on but ...
Hello ; We have configured Captive Portals with LDAP on a Windows Server and it works perfectly fine but now we have planned to add another different domain in LDAP & User-ID configuration but we have some problems which indicates access denied. After running the command less mp-log useridd.log it shows the following response on the end of l...
Is there any quick way to configure multiple policy objects on Panorama? especially looking to configure hundreds of fqdn objects to push them to firewalls managed through panorama so using GUI is quite a lot of work. e.g. for standalone PA, it is quick using CLI commands
Two PaloAlto Virtual appliances has been deployed in HA mode on Customer site. Device models: VM-200We plan to migrate the virtual firewalls to another host via VMWare Vmotionfeature. Issue is: the status of licenses of the firewalls. We have information that the licenses will be lost in that case. What is essential to do to recover remove...
Is there a good way to determine if the traffic flow through you firewall is optimal and the most efficient?
I am seeing an issue where upon pulling the plug in an active/active setup, OSPF does it's job. A few packets are lost but it is within an acceptable range. My issue stems from when the innactive member comes back online and joins the HA. I can't confirm this, but it feels as if the OSPF routes are coming up before the FW services are ready t...
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
