Next-Generation Firewall Discussions

Tunnel inside of Tunnel

I have a site to site configure and tunnel established between palo alto and juniper vsrx.  I am trying to route an IPSec tunnel through the existing tunnel.  I am able to ping through the existing tunnels so connectivity exist.  I have applied and "

OUTLOOK.EXE

Hello Everyone,

can someone provide me with information why this Executable (OUTLOOK.EXE9 is generating alarms in Cortex?

Thanks

DNS-related issues - PAN-OS 11.1.6-h3

Hi,

We’ve been facing some DNS-related issues on one of our Palo Alto firewalls running PAN-OS 11.1.6-h3. Specifically, we’re seeing this event:

PAN_ELOG_EVENT_DNS_CLOUD_TIMEOUT Description: DNS Security cloud query timeout Type: dns-security Sev

Conditional Advertisement, Revert Back Options

Good day all, I was working with PA support I may be just be getting confused with the information.

I'm trying to use conditional advertisement to advertise a single subnet via BGP only when another a particular learned route is down. I got this po

I have a question about capture conditions, etc. when using packet dump in IPSec VPN.

Hi

I am experiencing latency between Palo Alto of internal server and peer of internal server in IPSec and am trying to perform packet dump on Palo Alto firewall.

And I performed packet dump with the following conditions

However, Syn and Ack pack

URL filtering is not functioning as expected.

Hello Team,

We are experiencing an issue with URL filtering on a Palo Alto PA-440 running version 11.1.4 -h7. Despite having valid licenses, URL filtering is not functioning as expected.

Here’s what we’ve tried so far:

1. Cleared the cache and deleted

Queries on Packet Captures.

Hi Friends,

I have few queries on the Packet captures and traffic logs

1. If we are pinging from the management ip to the gateway ip i am able to ping but how can i see those logs on the GUI of the firewall.

According to my understanding the Tr

VM-Series Next-Gen Virtual Firewall w/Advanced Threat Prevention (PAYG)の契約変更について

AWS MarketPlaceで、VM-Series Next-Gen Virtual Firewall w/Advanced Threat Prevention (PAYG)をの購入を検討しています。構築期間中は時間払い（OnDemand）とし、本番稼働後は年間一括払い(365-day contract)に切り替えることは可能でしょうか。

API auth REST vs SOAP

I'm having an issue authenticating via RESTful API, PAN OS version 11.1

Using SOAP to fetch my API key, then storing it here

$header = @{
"X-PAN-KEY" = $apikey
}

Then Invoke-Restmethod like this

Invoke-RestMethod -Uri $newURI -Method get -ContentTy

Integrated User-ID Agent - auto password rotation.

Hi all,

Has anybody here ever worked on a solution to automatically change the password of the user-id agent via a PAM solution? 

My goal would be to have our PAM solution change the password in AD, than, via API if possible, change the password of

System Log "'tls-X509-validation-failed"

Dear All,

As today 31-May, 2024, From PA Firewall it show system log on "tls-X509-validation-failed" CloudAuthService Server certificate validation failed. Dest Addr: app-registry-service.apps.paloaltonetworks.com, Reason: unable to get local issue

VM firewalls can not join VM panorama all hosted in AWS cloud

Hello Team,

We are having an issue connecting palo-alto VM firewalls in AWS to the panorama hosted in AWS as well.

connectivity is successful between the firewall and panorama and we are using management port for this traffic.

we ran below command

Query about Session Offloading

Hi Team,

How to check the Offloaded session in PAN-OS 10.1.11 ?

In the below image the session is offloaded ?