Check patchs installed HIP

Hi,

We configured the HIP module in Palo Alto but is not able to detect patches installed on Global Protect clients sometimes.
There are clients, connected to the VPN GP that if it is able to see the patches, in contrast there are others that does not

How to find source of high open sessions and/or throughput

If your Palo Alto firewall is experiencing an unusually high OPEN session count, and/or high throughput, what is the best way to determine the source or destination at the same time of the event?

We have most of our security rules set to log at ses

Link Failure - Syslog

Hey all!

I have a PA-3020, eth1/1 and eth1/2 are an aggregate (ae1).

on the switch, it's a Port-channel.

I want to be informed when one of both interfaces is down.

So I set up a syslog server and all system logs are forwarded.

For testing purposes, I

How to combat VPN’s that use spoofed SNI?

Hi all,

My environment has a large fleet of iPads in an educational institution. We have restricted internet (no social media and so on) so the students spend time finding ways around it. We thought that bringing the PA unit in and enabling decryptio

Suspicious Packet with MAC address all zeros

Hi All,

I monitor networks for my client, recently I discovered some suspicious outbound traffic from internal to a known malicious host, although the packet was dropped on the PA. the logs I have showing that the packet's source IP as the internet's

Setting Up MS DirectAccess

Trying to configure DireectAccess (Windows Server) to work but I believe it is failing due to the Palo Alto. I created a custom application and application override for the ports needed but still failing. Per a Microsoft Document, "the firewall has t

Virtual Wire + vPC

I’m considering the following  ( Active / Passive Virtual Wire + vPC ) configuration in my primary Datacetner. I really don’t want to lose the current vPC redundancy that I have in place today. Today I can cut, unplug, power off, kick, shutdown, and

Setting up Policy to allow all access to a squid proxy

Hi

Still a beginer with the PA.

I have a universal rule that allows from 

any zone 

my internal ip address

to 

ip address group that has by proxy addresses in it.

For applicaiton I have 

http-proxy - this covers a lot of ports

default urls

from my test  

Double NAT

Hi!
we have a couple of customer who use paloalto firewalls. We have always problem to connect two accesses through NAT via paloalto. We usually use cisco meraki and the communicate on the higher port numbers. It always work when we have one site that