To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...
Hi, all,As title, everybody can ask PA and insert the URI to do what they want PA to do if people have the plaintext key and correct URI request.I want to limit the request to only permitted source address, but I cannot find any app-id about it, how ...
After upgrading from PAN-OS 5.0.4 to 5.0.5 and rebooting the primary 3020 of an HA pair, the logins we normally use tied to our Active Directory accounts are not working; they are giving us Invalid Logon messages. These Invalid Logon messages occur i...
HiWe have a scenario wherein we should create a virtual private IP in Palo Alto and that virtual IP will connect to a public IP. For example:PA LAN IP: 192.168.1.1PA PUBLIC IP: 9.9.9.9Firewall Virtual IP: 192.168.1.254Public IP: 1.2.3.4Users will con...
I have implemented the suggested Skype-Probe allow rule in order to block Skype. I have noticed that this rule will also catch traffic that is of the Application type Incomple and Insufficient-data. Just currious as to why it is ending up in this rul...
I have the global protect license and an active global protect subscription. Windows Laptops, Mac Laptops, and Android devices (using the app) can connect and access network resources. However I try with the iPad and it fails immediately. I get "Cann...
Hi,I have a PA500 on PANOS 4.1.9I'm doing some testing with Exchange, managing to get logs to identify iphones, ipads and android devices without a Captive Portal.Installed USER-ID agent version 5.0.2-2 on a DC, done auto discovery, removed all DCs a...
We have configured the captive portal for category 'Adult and Pornography' . Our question is, will the captive portal start every time or only when you are an unknown user? If the user is known (using Active Directory), is the user still being prompt...
HelloWhat do 'SML VM Checks' and 'Detector Threats' do in software pool?These value was 1 when delayed to connect Web-Server.Connection is normal when these value was high.What do theses do? and what something do these influence FW?Thanks
Is there a way other than waiting for the timeout to expire to remove an ip from the list of blocked ip's once it is blocked by a rule with an action of block-ip? I hope that makes sense :smileyhappy:.Thanks,Jim
Hi,PA can create report for Traffic, Threats, URL... very well.However, I don't see any way to create report for CPU, Throughput, or Session in long time (about one week, or one month, whatever time),Please let me know, can PA do that?Note: Do not us...
Working with Active FTP, we are having problems with transferring files larger than 1.5GB because the control channel hits the idle session timeout for FTP (set at 1800 seconds). Temporarily we have increased the timeout to 5400 seconds as a workarou...
Hello,When I working over Panorama, I have a continuos messages, If I try to see security rules or traffic logs or change with and other device, It presents this message "Could no set the session location" any idea?Note Panorama version: 4.1.6 over V...
We have an intern who we have given admin rights to our Palo Alto boxes and Panorama. I created a custom Intern role for him that just gave him access to the logs and reports and things but then read only to everything else. What is happening is when...
Hi All,.Is it possible to assign ip address to tunnel interface while using for s to s vpn? if yes,.. what ip needs to be used? I am trying to do PBF to tunnel interface for which we need IP address assigned to tunnel interface.Regards,Gururaj
Hi All,..We have two clients who have same ip subnets for VPN users ( ex. 192.168.29.0/24). Is it possible to configure PaloAlto to support both VPNs for different source users. VPN1: Source- 10.66.249.0/24 Destination- 192.168.29.0/24 Peer IP- X.X.X...
| User | Count |
|---|---|
| 12 | |
| 8 | |
| 5 | |
| 4 | |
| 4 |
on:
Advanced URL Filtering Eval expired - URL filter stops (persistent)
on:
Terminal Server agent internet not working
on:
Unlink FW to panorama for doing changes
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 17 | |
| 16 | |
| 12 | |
| 11 | |
| 9 |
