12-04-2024 01:01 PM
Hello everyone,
I am a Palo Alto PA-450 user. In our organization, we removed around 20 computers from the domain due to their outdated versions. However, these computers continue to log in using the credentials of the last user who logged in while they were still in the domain. This is not a major issue for us. The problem is that these computers are still accessing the internet. When we investigate using Putty, these devices appear as 'unknown' and are obtaining IP addresses. Is it possible to create a rule in our firewall's policies section to allow only computers within the domain to access the internet?
"I used ChatGPT for translations as English is not my native language. I apologize if my sentences are unclear."
12-10-2024 03:44 AM
the IoT addon license allows you to fetch all your device serials from (among others) Entra ID and apply security based on the device serial
you can also make DHCP exceptions for the mac addresses of the allowed/decommissioned devices and prevent the outdated devices from joining the network
12-10-2024 01:49 PM
Hello,
If you have user-id setup, you can create security policies that allow internet access only if the user-id is of a matching domain user. Also set the user-id to a lifetime of like 45 minutes.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5bCAC
Regards,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
