Anyone using captive portal (or web form) ? I can't find appropriate action i.e. 'web form' in the ruleset ? I am running 7.1.7
Why does the 8.x user agent install have two different installers. Can somebody explain the purpose of the two? In the case of the latest version I see: UaCredInstall64-8.0.2-20.msiUaInstall-8.0.2-20.msi Thanks!
Hello everyone, A few days ago I was testing version 8 with a few PA-200s that we have in our lab, tested new features mostly with user credential Submission. I found that the performance of the devices were impacted (Data Plane CPU was around 70%-95%) only having one or two devices connected to it, is there any advise of using version 8.0.x f...
hihow to block tor browser and this like browsers. example:opera vpn browser etc.
I am trying to test the DUO MFA and have followed the instructions in the youtube video, and in the admin guide. I can reach the https site under normal circumstances and I can see traffic in the traffic logs. As soon as I enable the authentication policy, the site cannot be reached, no new traffic logs are generated, and no authentication logs ...
Hi All, Apps and threats on the currently active box are set to download and install, on the passive to download only. Active box received and installed new updates. Will that automatically be synced to the passive? If we have a revert scenario where the Passive device has its apps and threats configuration to download and install, but the Acti...
Anyone create a policy allowing a Sophos AV install and then Updates form a DMZ? I have created such a policy but still seems to be an issue. The security policy has all the source and destination zones and the destination host are any. I am then allowing the following applications (not using ports at all)dnsms-ds-smbmsrpcnetbios-ccsophos-live-p...
On both the GUI and API I've noticed an upper limit of 10240 sessions returned, is that expected behaviour?
Kindly help to know the current stable version for Global Protect
Hello. I have recently upgraded our PA-5050 to PanOS 8.0.2. I went to upgrade our UserAgent from v 7.0.7-13 to the new 8.0.2-20 version on our Windows Domain Controllers I was getting errors during the install process and then realized our DCs were NOT 2008R2, only 2008 Service Pack 2. I also noticed we do not run any "read-only domain controlle...
My problem is the Source User in Monitor > Logs > Traffic & Threat don't show for all users. All other columns including Source and Destination IP are displayed properly. The unshown users can be from trusted lan/wlan/vpn zones and is going to trusted lan or untrusted wan zones. The application they run can be ssl, facebook or dns.....
Hi !I have question for you. I use PA-3020 Firewall. how to block Tor browser, opera vpn browser and this like browsers.I also want to block proxy VPN tools.Example: express vpn, nord vpn etc.
I posted a question here in a config article.https://live.paloaltonetworks.com/t5/Configuration-Articles/Certificate-config-for-GlobalProtect-SSL-TLS-Client-cert/tac-p/158713#M2099 PORTAL just lets me hit 'accept' anyway. (of course.. as it's all self-signed..)But GATEWAY won't let me continue ? Server certificate validation failed (again... ma...
Would you teach me where on the UbuntuOS the title is stored ? Regards, Naoya
Hi, we had a problem upgrading our panorama long time ago, after upgrade to 7.0 x we lost some config (URL filtering profiles, Custom url category, application filters), so we had to add all these config by hand Yesterday we upgrade again the PA from 7.0.x to 7.1.10 and the problem happened again, we have lost some part of configs (one prerule, ...
