Hi,is there a way to create a rule like this?if( session_end_reason eq aged-out ) and ( zone.dst eq SERVER ) and ( app eq incomplete ) and ( rule eq MY OUTSIDE RULE ) and ( bytes eq 308 )block the IP for 300 seconds
This is probably a relatively simple question and I think I know the answer but would like to confirm with the wider community. We currently have Global Protect Client 3.1.1 active on our Firewalls. We are looking to go up to the 4.0.x branch of the client in the near furture. Will devices out there with the 3.1.1 agent installed still work if t...
I am currently running Panorama with a 25 device license limit, and I have purchased and need to upgrade to the 100 device limit. It seems the auth code for the 100 licenses is the same as the auth code for the 25 licenses.When I go to Panorama, Licenses, and click the Retrieve license keys from license server, it doesnt return anything. I tried...
Hi, we realized that Palo Alto suddenly stops identifying users. We can see an example in this traffic logs. In this screenshot, we see how the user is being identified but there are connectiosn where its not appearing. sometime running show user ip-user-mapping all, we can not see the user associated to the correct ip. What could it cause thi...
Hello everybody, one of my customers wanted to expand the size of certain widget. for instance , system log panel, since they don't see the GUI at any time everyday. some of logs would be missed.do we have a way to expand the widget's size and have it list more logs on it. And as you know, we have LED lights in the front of box , Can we add new ...
Hey out there I have had a failed attempt at transferring a license to a spare device. The original device is still listed, with its licenses in tact under "devices", however the spare device no longer shows up in the "spares" list, it is in the device list with no licenses attached. Is there a way that I can reset the device back into the spar...
Hi all. How do I settings NAT and Application Override? PC-A :201.xx.xx.182 |Palo :210.xx.xx.168 :210.xx.xx.169 -> 192.168.1.10 and TcpTimeout 4000ms :192.168.1.1 |Server-A :192.168.1.10 Set Policy is Allow From 201.xx.xx.182 To 210.xx.xx.169 HTTPS, and NAT To 192.168.1.10. OverRide is From 201.xx.xx.182 To 210.xx...
I have a PAN 200 at sales office, I have temp deny policy in place as I saw huge traffic (Genetec Traffic) from/to a specific destination/source.But I still see High CPU causing the Firewall to Reboot and which triggered Site Down Alerts( Downstream device lost connection). Does the Deny Policy for huge traffic (Number of Packets or Size of traf...
This is using PAN-OS 8 in AWS. We have a site which has multiple networks attached. Users from the "main" network (let's call it 1.1.1.0/24) can also access 1.1.2.0/24, 1.1.3.0/24 via the default route supplied by the DHCP server, which goes to our core switch. (before you ask, I cant just change the subnet masks as the real subnets are complete...
Good morning, i wish know if it's possible to allow a websites during a period of time ( example between 12:00 & 14:00 PM) and then reblock the access? Thanks in advance for your Reply Esteban.
Hello, Is there any guide available for creating Site-to-Site IPSec tunnel between Palo-Alto NGFW and Barracuda NGFW?A generic guide would do the job.I could go through the generic Phase1 & Phase2 configurations and troubleshoot from there but would be good if there is any suggested configurations available from Palo-Alto. Thanks.
Dear all, I am a newbie and currently at the first phase to learn Palo Alto Firewall. I am setting-up a simple virtual network topology using VMWare Workstation as follows. As you can see from the diagram, there are two zones which are labeled as Trust and Untrust with network 192.168.250.0/24 and 192.168.150.0/24 respectively. The ETH1/1 is fa...
Good morning. I have a situation where I have a bunch of linux clients that need to be able to VPN into an environment protected by a PAN Firewall in FIPS mode. With FIPS mode enabled on the firewall, the ability to use 3rd party vpn clients via the x-auth feature is removed and there is no global protect client for the linux platform. Anyone h...
Hello I'd like to prepare for new category “command-and-control” I have two firewalls one with BrightCloud and one with PA url filtering database. Both with 7.1.11 PANOS and latest url filtering database but when I try to change default action for this new category I see: Do I missed something? What's wrong with my configuration could be? Rega...
Hi all,I'm having a problem getting Mitel's Border Gateway (formerly known as Teleworker) working properly. For those not in the know... Mitel is a large VOIP phone system company and they have various addons, including a server which would typically sit in your DMZ and allow remote workers to have a handset in their home / remote location as if...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
