I can poll PA200 via prtg(network mgmt) but am not able to poll PA- VM firewall via same.
How does Palo Alto classify the applications risk level? I am looking into general applications that are used everyday by lots of people that have Risk level 4 and the application research center gives me this: eventbritebusiness-systemsgeneral-businessbrowser-based Reasons are: 1 SaaS1 Transfers Files1 Used by Malware1 Vulnerabilities1 Widely U...
How to check policy installation status in panoram aor device. if i have installed the policy how to check other person when policy was install in palo alto firewall ?.
I have a known external Nessus scanner that scans my external network every weekend. Every Monday morning, I've got hundreds of alerts due to these scans. I do not want to disable the scan alerting in general because if anyone else scans me, I want to know, but how can I whitelist these few specific IP addresses so I won't get all these alerts? ...
Hi, Anyone ever use “internal host detection” on GP? For some reason it does not try to do the test. I checked the GP services log and did not find an entry there. I am trying to force "enforce GlobalProtect for Network Access" when users are cocnneced to the internet. Thanks
HOw does one go about fixing this erro
Is there a way to see which managed devices have outdated signatures including release dates, for example - Wildfire, App and Threats and Antivirus?
Is it possiblt to block all streaming sites without URL filtering? Im looking to stop things like iplayer and basically all streaming as if using up a lot of bandwidth, yjinkgs like iplayer.It looks like its showing up as ssl traffic on the firewall.
With the addition of the Command-and-Control URL category, I would love to get an alert any time someone hits that category so we can remediate the problem PC. I just can't for the life of me figure out how to set that up. I don't want all URL category blocks sending alerts, just this one. Before I pull my hair out trying to figure out how to d...
I am having a hard time understanding what captive portal is and what the function is of this feature?
Hi, When we detect that a communications channel is saturated because someone or something is downloading a large file or occupying the entire bandwidth. We do not know how to see in real time in the web interface of a PA-500 (firmware 7.1.6) that is happening. It is only possible to see it once the communication has ended. That is, if I downloa...
Hi, I would like to know is there any way to prevent same admin user (say devAdmin) making configuration change from different places (Web & CLI) at same time? Anthony Cheung
We currently block the web mail category but I need to make an exception which I can place in our allow list. We need to allow outlook.com/domain.edu but not sure if I should use this full URL or if I do will it allow all of outlook.com or if I need to use a REGEX. I appreciate any help.Jeff
Hi Guys, SIEM tool - QRadar Firewall - Paloalto Received one exploit alert in our siem consoleSource ip is internal workstation reaching to external remote public ips like yahoo,awsalert name is exploit events across multiple targets containing generic prompt xss vulnerabilityPaloalto detected the vulnerability traffic and sent those logs to SI...
Hi, Has anyone gotten GP user-logon (ALWAYS on) and OTP working toghther? Thanks
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
