Hi, Is it possible to exclude Skype for Business application from SSL Decrypt? Custom No decrypt URL category is not an option because new clients with on-premises Skype instances coming constantly. brToni
If I wanted no layer 7 inspection for a particular IP at a certain port - how can I do that without Application override? Thank you.
Greetings all, Title pretty much says it all but we're wanting to move to 8.0.6 since it is a Palo Alto support recommended version. We're currently running 7.1.4 I believe with both of our active/active firewalls. Panorama is already on the 8.0.x track. My normal update procedure is to apply the update to one firewall, let it reboot and come ...
I noticed my Scheduled config-export backups were not working. At some point they were working file. Upon Further troubleshooting I found that the Panorama scheduled config export was failing because the password was 20 characters long. Upon changing to a 15 character password for the account the exports were successful. This appears to be an...
Can PA be used block weak ciphers at zone or server level?
Am I correct in assuming that if you use App-ID you can't also use TCP sercice ports to allow aditiona other services on the same rule. ThanksRob
My HA pair don't show synched and when I do a manual synched it say it completed successfully but the GUI show otherwise
I’m interested in whether MineMeld can, or should, be used to trigger a PA EDL refresh if the indicators for a feed were changed after an update? Has anyone seen this done before? I’m curious whether this would be a recommended solution or whether interfacing with a PA’s API should be left to another scripting platform? If it is appropriate ...
Hi all, In my environment, some developers use NuGet in Visual Studio, and in certain cases, commands will call out and download PowerShell scripts.Obviously I want generally to block PowerShell script downloads, but in special cases I need to allow them when they come from specific places. Unfortunately for my devs, since we wholesale block .ps...
Greetings, So, I have a ticket open with support requesting on detailed reporting as seen on Network --> Global Protect --> Gateways --> Remote user link --> remote user tab, but on a cumulative basis instead of just data from the last login session. I searched around and found two links:https://live.paloaltonetworks.com/t5/Managemen...
Has anyone created a custon region and later found out that there was alrady a built in region for that country? How did you deal with it?
Hello. Anyone had issues updating PA-200 on PAN-OS 7.0? Currently I'm on version 7.0.0. I downloaded PANOS 7.0.2 normally, but when I try to install I get the following message: "Failed to install 7.0.2 with the following errors. SW version is 7.0.2 Open of /opt/panrepo/releases/7.0.2/base/RPMS/openldap-clients-2.4.23-6.pan.mips.rpm failed: No s...
Hello I need some help in an automatic update for the Threat Prevention.let me explain to you our design.We have the headquarter, and the branches, in one of this branches there is PaloAlto firewall, and this PaloAlto is not connected to the internet directly, there is a proxy internet in headquarter, then how I can configure my PaloAlto to see ...
I used to be able to upload attachments of logs to the Live community. I no longer see this option. I have tried in both chrome and safari. Does anyone have this problem?
Hi, I want to upgrade PAN OS version 7.0.5-h5 to 7.1.14, so what the versio steps , or can I directly install to 7.1.14?
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
