General Topics

Resolved! TEST VM-500 on ESXi Deployment

Dear Community,

I hope you are doing alright.

We are in process of renewing our firewalls and I would like to test-deploy latest version of the Palo Alto VM-Series 500 on VMware vSphere Hypervisor (ESXi).

Could you please let me know how I can the fol

Resolved! PA cluster certificate missing

Hi,

We have two devices in HA, we realized that active node has a certificate (captive portal) but the passive not. The configs are synchronized but the passive doesnt have this certificate. We tried to export this certificate from node active and im

Resolved! What IP's does the Mindmeld system need access to?

Hello Everyone,

I have spun up the ubuntu VM with the MineMeld iso.  This system is behing a firewall.  What IPs/URL's does this system need to have access to?

Thank You,

Scott

Resolved! ROBOT attack - some advice needed

Hello

According to https://live.paloaltonetworks.com/t5/Threat-Vulnerability-Articles/PAN-OS-exposure-to-ROBOT-attack/ta-p/192397

For complete protection, signature #38407 must be applied upstream from any interfaces implementing SSL Decryption, or ho

Resolved! 'Certificate for Secure Syslog' option in PAN-OS 7.1.X ?

Hi, Good day.

I'm testing about Syslog setting using SSL in PAN-OS 7.1.14 environment. 

Under 7.0.X, when I created a certificate, then I clicked it, I can see an option 'Certificate for Secure Syslog'

In PAN-OS 7.1.X, however, when I generate a cert

Resolved! Does globalprotect detect roaming between networks?

Dear Community, 

I´d like to check with you regarding the following globalprotect scenario:

I´m connected with my laptop to the LTE mobile network to be outside and I´m connected to the external gateway, when I connect to the wifi network... Is it po

Resolved! Determine IPSec tunnel performance?

Hi folks,

We have several IPSec tunnels, but only one is complaining of poor performance using a specific application that the tunnel is meant for.  Management asking for firewall stats to prove if it is related to IPSec tunnel/firewall performance i

Resolved! PA-7000 Not passing syslog traffic to Tufin

Hi All,

We have a PA-7000 (7.1) and Tufin (for syslog).

The system was previously setup to forward syslog traffic to Tufin. 

Then all of a sudden, Tufin wasn't receiving any traffic.

What I have done so far:

1. Went through the saved configurations to se

Resolved! Do you only need to install the latest update from Panorama, or the prior updates as well?

I am being told that when updates are released (sometimes 3 a week or 2 in 1 day) that you only need to install the latest update as it includes the previous updates rolled in. My security mindset says to install them all anyways to be sure. But I am