General Topics

Screwed up management IP

So I was configuring a new PA 200 using an XML file and I screwed up the management IP.  So I logged into what I thought was my new device, but was an existing already operational device and changed only it's management IP without changing default ga

Rule matching: left-to-right question, unexpected output in traffic log

On PA5050 running 7.1.5, in the monitor:traffic logs section,  traffic that matches interzone default rule shows up as matching the first rule in the list.  The first rule is configured like so:

source zone: any, source address: any, user: any, destin

Adding a Proxy ID member to IPSec Tunnel

I added a single host to an existing tunnel. Does the phase 1 portion of the tunnel need to be restarted to take effect? After I added the new proxy-id 39 - if I run show vpn flow - I see that portion of the tunnel is in "init" phase while all others

Upgrade secondary PA

i have done this in the past to save time but I was interesting in hearing what the community has to say about and if anyone else has done this

I usually upgrade my secondary PA the afternoon before I do the primary ithe next morning and they are in a

DNS Sinkhole and Honeypot to Record URLs accessed

We've set up DNS sinkhole and it works as expected. We're able to find out which IP addresses tried to access malious sites. However, we won't be able to see the URLs these IPs were trying to access. We're thinking of building a honeypot (or maybe so

Global Protect Internal Gateway- Prompt a user with remaining login/lifetime.

We are planning to use Global Protect to learn user-ip-mappings. Straight forward Internal Gateway/s Architecture with 2-FA.

User Logins to the portal(LDAP) and 2FA prompt, a succesful login will update the ip-user-mapping on the firewall. 

However, I

Unregistration a firewall from panorama lost all config.

hello,

Quick question. I have a panorama and I proceed to unregistration one firewall, Do I lost all config of the firewall in panorama ?.

Best Regards

Andres

Captive portal (web form) can't find action

Anyone using captive portal (or web form) ?  I can't find appropriate action i.e. 'web form' in the ruleset ? I am running 7.1.7

PA-200 and PANOS Version 8

Hello everyone, 

A few days ago I was testing version 8 with a few PA-200s that we have in our lab, tested new features mostly with user credential Submission.  I found that the performance of the devices were impacted (Data Plane CPU was around 70%-

how to block tor browser?

hi

how to block tor browser and this like browsers. example:opera vpn browser etc.