Hi All, i need to undersatnd if tacacs+ is cisco properiety , so how come juniper and paloalto use it ? second question here , tacacs+ used mainly for cisco command authorization , so what is the need for that inside paloalto ?
Please advise the maximum PAN-OS version for a PA-820. We would like to ensure optimal security without sacrificing performance. Recommended PAN-OS version to run is 11.1.4-h1
Greetings, I am running NGFW x 35 (10.2.10-h3) and User-ID Agent 10.2.2-111, which I believe needs to be upgraded to avoid the Nov-18 issue. My question is, does the User-ID Agent need to remain in the same stream as NGFW (ie. 10.2.x) or can it go to the 11.0 stream? A side question (because I inherited this environment) ...If I have the 'st...
Can you please provide some advise on this: Our client has an issue with the new Apple MACOS Sequoia The new Apple MacOS Sequoia seems to have changed some behaviour in how they check the local firewall. Currently Global Protect HIP does not detect if the local firewall is enabled. I have attached the information above. Apple Firewall:...
Hi, I'm running Panorama in an air-gapped environment. As it stands, I have to download the license key from the Palo Alto Support Portal and then manually upload the key to Panorama. Is there a way this can be automated? Does the API support this method? I can't find anything that suggests that it does. Kind regards, Carl
I am having some trouble understanding the different wildfire options. Hoping someone can lead me to being able to understand. First of all - the wildfire profile itself:We have two sections - rules, and Inline Cloud analysis. What is the difference between these two sections? According to documentation: "The Advanced WildFire cloud operates a s...
We have had problems with the graphic interface of some 3250 units. The units respond to ping and allow CLI connectivity, however, when I try to load the graphic interface from a browser it indicates that it is not possible to load due to connectivity problems, which is not true since the unit does respond to ping and CLI. We tried connecting di...
We have problems with creating custom reportsWe configured custom reports as we need pointing the time interval for one month but the report shows us only two last days of the previous month.i can also show you admin@PA-3020> show system logdb-quotaQuotas: system: 4.00%, 3.231 GB Expiration-period: 0 days config: 4....
Hello, I am a newbie so please bear with me, I Have a very simple LAB with a Palo Alto firewall with 11.00 Ver and an internet connection.I know that to provide internet connection to the user i would need a Policy,default route and a source NAT. Lets suppose I dont have a Source NAT for the internet connection, how would I know that I am ...
Hi, I have ECMP with PBF configuration for dual ISP. ECMP using weight 100 on ISP A and 200 ISP B. PBF rule user A to isp A, user B to ISP B. default routing to ISP using the same metric we expect that user A will go to ISP A, but in reality user A is expected to ISP A, but we saw on the log several user sometimes is still go to ISP B, even ...
Hello everyone, Trying to make my ubiquity unifi access points with multiple ssid tagged with their own vlan IDs work with PA. it worked seamlessly with Sophos but can't make it work with PA. I have one Ethernet port L3 configured with subnet DHCP, DNS and assigned to office zone. Acces points are connected to it via smart switch which is ...
I got two devices 3020 and is running with HA Active/Passive.First, I have download and install "Application version 384-1877 (07/18/13) and Threat version 384-1877 (07/18/13)" on the Active device and I select Syns ... to peer.After that, I issue "request restart system" on the passive device.Next, when the passive device reboot sussesfully, th...
I am trying to setup SDWAN, however this firewall currently has several Site to Site VPNS which causes an error on deploying site to site vpns. I am trying to setup a second WAN address to be usedonly for SD WAN. Currently my public ip is 2.2.2.2/24 on ethernet1/2. I converted it to a trunk vlan 2 (2.2.2.0/24) as the native vlan and the tagged v...
Hello, From my colleague I have received the info about Upcoming November 18, 2024 Deadline for NGFW User-ID and Terminal Server (TS) Agent Certificate Expiration where I need to set and receive that Important Emails? is because I'm the responsible of all PA's Firewall on our organization but I don't know where subscribe to receive that ema...
Hello. I have a Palo Alto PA-440 We have enabled path monitoring for our ISPs, with the destination address/monitor IP set to 8.8.8.8. The ping interval is set to 3 seconds, and the ping count is 5. Additionally, we have configured and enabled system email alerts for the severity level "Critical". As soon as any of the ISPs is down or the route ...
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
PavelK
on:
Throttling ingress bandwidth on a sub-interface
