Does anyone have issues working with Zoho Assist with SSL Decryption enabled?Does Zoho Assist do certificate checks at the client side?
Hi ,I'm facing issue with skype for business through paloalto. very bad quality, it's not BW issue because we check it even at night.any one support more with this subject.
Scenario:Decryption profile for traffic from the internet to GlobalProtect IP along with an SSL/TLS Service Profile for GlobalProtect, both set to TLS 1.1 or above; Decryption profile has 3DES unchecked.PA-5020, 7.1.10Scans from sites like ssllabs.com will show that 3DES is still enabled. Only changing one of the profiles to TLS 1.2 stops this....
Hello, An email attachment has been classified by Wildfire as malicious. However, it was not blocked and just an alert was logged.Below are two screenshots from the Wildfire submission and threat logs.Any idea why has the Vulnerability Protection classified this threat as medium even though WildFire classified this file as malicious? How to make...
Taken from the install guide, but is this still the correct repostitory: :~$ sudo add-apt-repository "deb http://minemeld-updates.panw.io/ubuntu trusty-minemeld main" :~$ sudo apt-get update Hit http://security.debian.org wheezy/updates Release.gpgHit http://security.debian.org wheezy/updates ReleaseHit http://security.debian.org wheezy/updates/...
I've been working with one of my customers on enhancing security across their firewall deployment. After creating a template in Panorama including management hardening and protocol hardening configurations, they cloned the template so they could apply it on another firewall. They then updated one of the zone names on the new template. And for s...
Hi, We are trying to upgrade agents to version 4.0.3 but its not working. Its failed. I attach an image. How can we know whats happening?any logs???
Hello, I found how to add a new administrator. But I want this new administrator to get only read access on everything and write access on a miner - in order to add indicators (IPv4 and URL) on it. Do you know if it is possible ? and how ?
I have a output feed that is serving up a list of URL's but I need to have http:// and https:// removed from the feed. It looks like I can use the ?v=panosurl output feed parameter but I am missing how to go about this when using the Autofocus hosted Minemeld. Any help is appreciated.
Hello, I have a PA-VM running on a ESX server.I want to set up SSL Decryption on it using a SUBCA certificate chain signed by a PKI (windows server).I check boxes "Forward to trust/untrusted certifcate"I export the SUBCA to store it on a client machine (to avoid warning message)The network is OKThe policy is Any any permitThe SSL decryption poli...
I need to know the minimal system requirements to run Minemeld on Ubuntu 14.04 LTS. How big does the HDD need to be and how many CPU's and RAM is needed minimal ?
Hi, It came to my attention that our IP address: 94.23.154.203 according to paloalto geo database appears as it is located in Russian Federation, whereas RIPE and ARIN, NIC, maxmind and others state correctly it is a United Kingdom based IP address.This is problematic for us, as some of the clients of your firewall solutions block traffic from/t...
Hi folks, I am being asked to setup a new IPSec VPN Tunnel and one of the questions from their "worksheet" is what our Tunnel interface IP address is. We have several IPSec VPN tunnels, each with their respective Tunnel Interface assigned. Most of them do not have a specific static IP assigned to there tunnel interface, only a couple. These we...
We are trying to add rules for Tridium Niagara application. What will be app-ids for TCP/1911 and TCP/4911? Thank you for you help.
Hello, Just a quick question. Unsure if this has been asked previously. When applying a non-reoccuring schedule to a security policy, I have noticed in pan 8.0.x, once the schedule has expired, the policy in the security policy view does not identify it as expired. I am trying avoid the obvious scenario of temporary policies being applied eit...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
