I want to check if we can block connections if a device is missing critical patch (released May 2024) or any other critical patches within the last n months (where n is a user-defined timeframe).
Can this be achieved with HIP configuration?
Hello,
I need to integrate my FortiAuthenticator, which is located at a remote site, with my PA firewall to add additional authentication factors for users connecting to GlobalProtect.
I haven't been able to find the documentation and procedures to
...
Dear All,
As today 31-May, 2024, From PA Firewall it show system log on "tls-X509-validation-failed" CloudAuthService Server certificate validation failed. Dest Addr: app-registry-service.apps.paloaltonetworks.com, Reason: unable to get local issue
...
Hi,
I am new to the PA world and I have the following design been given to setup. I am trying to find the best way to do this. I have done in Fortinet by creating SDWAN interface and it worked but not sure if Palo has the same kind of setup. If som
...
Hi,
Specifically for PA-1420, I aware the storage capacity is 240GB. Is there anyway I can know the duration of log retention for 700 users?
From what I understand, log retention is affected by the space on disk, not on the number of user. When y
...
Hi all,
I have a PA-440 currently at 10.2.7-h3.
After performing PAN-OS upgrade, there is an error on telemetry stating "Send File to CDL Receiver Failed".
I found a similar article and applied the suggestion by retrieving the license key
...
Recently we experience distributed VPN dictionary attack on our Palo Alto Global Protect from different countries, ISPs and hundreds of IP addresses. Since we have MFA the attack was unsuccessful so far but I want to stop it somehow. The malicious ac
...
Dear ALL,
I have completed all my exam for PCCET certificate but i am unable to get the PCCET certificate.
i have completed below exam and attached the certificate.
SASE Fundamentals
Cybersecurity Fundamentals
Security Operations Fundamentals
Cloud S
...
User Activity sharing the URL logs for only the last three days, even after editing the log storage and retention setting for the URL summary.
We have a 5220 at the core of our network making east / west decisions between LAN segments and dark trace (DT) appliance. I currently have the DT appliance configured to take autonomous action with DT respond. One of the ways DT enforces this is by
...
Hello everyone,
On a required page the application google-cloud-storage-base is used as CDN:
https://storage.googleapis.com/abc-bca-ger/uploads/....
At the same time, the google-cloud-storage-base application should be blocked for all other purposes.
traffic in monitor tab does not appear. After rebooting the firewall, it appears for only 1 day and does not appear after that.
We checked the retention and max quota and also, we checked the storage, and all is good. The problem starts after upgradin
Hi,
Can somebody tell met what you can expect from downloading a file over prisma access backbone.
Our datacenter is connected to service connection and when I try to download a 200 Mbps file from the datacenter to a remote network located in the s
...
Hello we have got a customer and they have purchased 5 X PA1400 series
Customer has CSP account and he registered one PA and it went well
but when he tried to register 2nd PA , it shows This serial number is already registered .
How is this po
...
Hi!
Recently we were receiving in our environment alerts of failed authentications from different random IP's and random usernames, i was able to reduce them following the next article: Detecting Brute Force Attack on GlobalProtect Portal Page - Know
...
| User | Count |
|---|---|
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
OtakarKlier
on:
SDWAN BGP over pre-existing BGP internet.
OtakarKlier
on:
URL Filtering logs not appearing on firewall
OtakarKlier
on:
potential issue with RADIUS traffic passed through Palo devices
reaper
on:
Pan-OS stability?
reaper
on:
Inbound and outbound security rules
