Hello, was wodering where i could get a low cost support lincense for PA-200, thanks in advance
Hi, i'm trying creating a indicator for SLW injections events , extract src_ip and insert into Down below the code attached to the syslogminer class stdlib.syslogMiner , unfortunaltely validate process reports errors with the only suggestions "Condition is invalid", could be either a formatting erro or a logical erro, hard to say. conditi...
Hi- Is there a way I can get our PA-220 to alert our SNMP monitoring system when a Policy Based Forwarding rule fails/activates? I've set up SNMP on the firewall, added a device entry in our PRTG monitoring system, and set PRTG to automatically detect the device. It has discovered about 40 sensors, but I can't see any that relates to PBF. We hav...
On Weelkend, one of our tunnels was down for about an hour. I was checking system logs and found these messages repeatedly for that tunnel, even after it is up. Anybody knows what this means and what to look for in logs to find the cause of tunnel failure. 'the packet retransmitted in a short time from x.x.x.x[500]''IKE phase-2 negotiation reque...
Google has a threat list api, has anyone created a miner for it? https://developers.google.com/safe-browsing/v4/lists
Hello, need to know if the PA-200 supports the latest version of 8.0.2 i am on the fense on getting one but am concered it may not be handle the latest code , also if not which PAN is the next best thing recommended for home/small business that can handle the latest code .. thanks in advance
Not sure if this makes sense -- plan to use Palo Alto's REST APIs for automated script tasks and health checks. Is there a way to save the key into a variable string -- therefore you can make multiple API calls and reference to the output key? Want to automate some of the daily health checks (HA status, available free space logs, critical event ...
Hallo, ich suche ein Start Tutorial in welchem einfach erklärt wird, wie man mit der PA220 startet. Also dieser Beginner Guide hab ich schon, IP vergeben etc. Aber nun welche Regeln sind Empfehlungen, wie blockiert man diverse URLs? Wie baut man einen VPN-Tunnel zwischen zwei PA220 auf, eine Fallback Leitung einrichten. Und noch vieles mehr. Ich...
our internet went down a few weeks ago when our primary PA failover to a secondary PA. We found out, after doing some research and investigative work, that this was due to the amount of new session created, which cause the PA to use the slowpath and access more cpu resource. Once we failedover, we had internet access for about 5-10 minutes and t...
Trying to connect PA-500 to user id agent on domain member server and keep getting this from the agent ID app log. 10/02/17 18:33:09:959[ Info 1219]: New connection 10.100.20.20 : 33369.10/02/17 18:33:09:975[ Info 1292]: Device thread 1 with 10.100.20.20 : 33369 is started.10/02/17 18:33:09:975[Error 3352]: Failed to validate client certificate,...
Hi everyone,I'm develping an automatic software to get configure data from PaloAlto firewall. I need to know if a firewall is virtualized (I already know how to get this info) and, if the firewall has one/more than one vsys, I want to know these vsys's names. I just can get this info if I write: set system setting target-vsys ?, but I'm using Pe...
I am trying to find a range by DMZ. For example in ASA we can show-show route | inc 10.10.10and it will show the DMZ where that route belong. Is there a way to find that in PAN OS 7.1?
Hello all.I would like to know how to count sessions at Palo Alto.I do not understand that the number of sessions is different between the two devices.The two devices are Palo Alto and BIG-IP.It is counted as 140 thousand sessions at Palo Alto and 30 thousand sessions at BIG-IP.Thank you.
I am having no issues actually sending syslog data. The issue is sending to much over the network. I have two different applications that require syslog data from the firewalls. One application requires all the logs with all the content. The other application only requires a limited number of fields in the trafic log and all of the change lo...
What does the rule with the index number 0 refer to in the packet-diag flow basic for the security as well as the NAT policy? The id manager does not show a security nor nat rule with an index 0 while the show session shows that the traffic was matching security policy “General-Internet” which is index 7 and NAT policy “Student-NAT-Out” which is...
PavelK
on:
Replacement of RMA
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
