Dear Any one know the SSL VPN and IPSEC VPN sessions limit in all of the PAN platfrom model . if yes please help to give me a list about that.Thank you so much
I frequently use the ( addr.dst in 10.211.2.94 ) query type to search traffic in the Monitor tab of the PAN gui. What if I was looking for any host in the 10.211.2.0/24 subnet? Is there way to have the equivilent of( addr.dst in 67.211.2.0/24 ) or ( addr.dst in 67.211.2.* ) or ?? Thank you.
Good Morning to All – Thanks for reading! I was hoping to get some feedback from the community on how everyone handles outbound web access for their users? I have an Active Directory Domain with about 300 users. We use groups from AD on the Palo device to allow users out to the web and or external resources. The problem I have been facing using...
Hi AllAfter some help from the Guru's.I am trying to configure LACP between PA 3020 Active / Passive and cisco switch.I have created the AE group interface Inside with the ip address.I have added 2 interfaces to the AE Group on each FW. I have created a portchannel on the Cisco switch and put the 2 ports from the Active Palo and 2 ports from the...
Hello, Since upgrading PA-200 to 8.0, we’re having disk space issue more often.It seems to be due to excess logging, which we clear up.Is there a way to automatically clear these logs once the disk hits a lower threshold? Thanks in advance.
Hi, I have installed Minemeld on a Ubuntu 14.4 virtual machine more than a month ago. All worked well, updates, webpage and all.Today I noticed there is no webpage anymore to login to. Ping resolves so network seems ok.I have restarted the VM and tried to update Minemeld to version 0.9.40 but that version was allready installed.Tried to start th...
What is the current standing of the MineMeld CentOS docker deployment model? The latest post I have seen from @lmori (29/11/2016) is that it is "quite stable now and supported". Could we get an update on PA's current stance on this deployment model? Is it production viable? Cheers
We have an Active/Active PA-5050's in production with HA3 running on a single ethernet (1GB). I need to know if there will be any packet lost (HA packet forwarding) if I change this interface from HA type to AE type/AE group (e.g. ae8). Considering that this aggregated group (ae8) has been already created and have another ethernet (1GB) already ...
Hi I am a new PA user, purchased a pa-850 and 2 x PA5220's Adding these to my OSPF network, i have setup a policy "network protocols" that allows OSPF. But for some reason in my log, I get OSPF time out session and aged out sessions and sessions that have 0 bytes. So I contact support. after 2-3 weeks, they bring it up in their lab and I am tol...
Hi All,Just want to know if i can use single VSYS to configure globalprotect remote vpn access for different customer with different ip range.
With Pan Configurator service-edit.php if I want to delete unused objects is it possible to set a count limit? For exampel I dont want to do all 500 at one time unt say 100 at a time. Look to see if there is a string like "maxcount' to end comman below. " php address-edit.php in=2473.xml out=/dev/null actions=delete 'filter=( object is.unused)'
Hi All, We are currently in the process of roling out a Privielged Account Security platform to mange and rotate passwords across all of our devices. We have ran into a snag with the PAs because of the password sync when in HA... Is there a way to disable the sync of passwords for local account allowing us to have independent passwords on each...
We have had a heck of a time getting Global Protect 4.0.2 deployed in our environment. One of the things I am coming across is that the install goes fine, at least accoring to the exit code on msiexec and in looking thoguht the log created by msiexec. However, the pangps service does not always get created. Granted, the number of macine affec...
Hi all, Looking for some feedback from anyone else who has run into this issue before. Basically we have zone protection set up for our Wifi and ResNet security zones. Included in this zone protection is a block-ip rule for port scanning. We've received a request to allow client devices on these networks to reach a server using a specific piec...
Anyone know where I might find an in depth tutorial on creating a more advanced custom application? The tutorials I've found have all been HTTP related, which is great, but I was hoping to find something that did something a little more complex like something that used TCP and/or UDP signatures. Thanks!
| Subject | Likes |
|---|---|
| 7 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 7 | |
| 4 | |
| 2 | |
| 2 | |
| 2 |
