General Topics

Domain whitelist appears to be case sensitive, is it?

I created a domain whitelist called wlDomains, a node based on stdlib.listDomainGeneric and added the whitelist to my domain aggregator. I then added the indicator "aol.com" (lowercase, without the quotes). When I checked the feed for the output node though, it still listed "AOL.COM". I had to add an all uppercase entry to wlDomains in order...

Documentation

My background is in Cisco, Juniper, and Ubiquiti Networks. I just purchased my first PA firewall and I'm looking forward to becoming an active participant in the community. I just wanted to give kudos to the PA team on their documentation. I'm looking at the PAN-OS 8 document and I can't believe how well thought out and laid out the document ...

Global Protect Report

Hi,Can any body guide me in generating a report of all the User connected via GP for their Session time (Like Session Start and Session End) each day for 7 days or a month (Whatever required, Please reply me

Configuration of PA Firewall from Asnible - need assitance

Hello Friends, I am new in terms of automation things I belong to Network and Secuirty specialist, however I am learning and implementing Ansible from documentation - but to be very honest I still unable to Push Playbook config to directly my Palato Firewall - I have installed asnible - below is version,$ ansible --versionansible 2.4.2.0 I creat...

Panorama configuration report

Hello,I would like to get a report containing settings of all firewalls in the Panorama console, without going device by device.Is it possible?First report is to get interface IPs and subnet (contained in the Interfaces, Ethernet menu of Panorama) Or not possible, I need to go for scripting?

Minemeld exports feed to another Minemeld via TAXII

Hi Guys, I am a newbie in Minemeld. I have deployed two Minemeld in two VM. Recenlty I am studying how to export the output feed via TAXII to my second Minemeld. May I know is there any way to do that or do we have any miner can poll the feed ? For the output feed prototype I have used stdlib.taxiiDataFeed. Please help if anyone know how to do ...

Financial Service No-Decreption

Dears We set rule in Decrytion for no decrypt for Financial services category .Although there is website when users go to it the PaloAlto do "Decryption"The site is "URL":www.nbe.com.eg How we get PaloAlto do "No-Decrypt"for the traffic goes to this site

VM-Series Virtual Firewall Passwords

I just spun up a new VM Series Firewall in AWS via the marketplace, can connect to the unit fine but the admin/admin username password combination that I find to be the default on PA documents does not allow me access. Any idea what the default username password might be?

Panorama upgrade 8.0.2 to 8.0.8 wont boot

Just tried to upgrade our m100 from 8.0.2 to 8.0.8 and it after it installed and rebooted it never came back up. Has anyone ever run into this problem?

Resolved! PA Packet capture

Is there anyway to get bi-directional data in a single packet capture on the PA ? Some of mine seem like it splits the traffic into tranmissions on one, drop on another and recieve on yet another. Can those all be combined?

Resolved! Wiping out any changes in candidate config

From Device Management, if I "Revert to last saved config" does this simply revert back to the previously committed or saved config? ie it just wipes out any unsaved changes to the candidate config?Is there any impact in doing this?I simply want to wipe out the current candidate config.Cheers,Shannon

Vulnerability Scanning

My requestors wants to perform Vulnerability scanning on the Palo Alto firewall devices and they want to whitelist the Qualys devices residing on ON-Prem. So my question is do i need to create security rule or make modifications to vunerability or allow those scanners on the management interface?They provided me the scanner IP's that they wan to...

Resolved! Customize User-ID Display

Is it possible to change how usernames are displayed in the Monitor tab? Our samAccountNames are rather cryptic and it would be nice to be able to view them by the displayName field instead.

Resolved! Cannot export FW device config from Panorama

Hello, We are trying to push the device config bundle to the first firewall in the HA pair, which I’ve successfully imported the configuration for. However, getting error message below when trying to 'Push to Commit' or 'Export' from Panorama.Note the configuration itself it very small – there are no security policies and less than 20 objects. ...

Resolved! Urgent - Port Block Help

Hi All, we are trying to implement a security profile to block port 445. Universal, source any/any, dest any/any, application unchecked, service port 445.The profile is near the top of the list of profiles (above the outbound traffic profile).For reasons unknown we are still seeing entries in the traffic log when we filter on:-( port.dst eq 445 ...

Discussions