About tostern

tostern · ‎09-18-2020

Hi @SYokoyama2 it looks like that the Admin Guide doesn't describe it. But i am happy to hear to found it. When the solution is good for you please close the threat and mark it as solved Regards, Torsten

tostern · ‎09-18-2020

Hi @SYokoyama2 , did you followed that guide? https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/access_control/access_keys.html or this guide https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-administrators/create-access-keys.html Regards, Torsten

tostern · ‎09-18-2020

Hi @ramyfrahman You can maybe use a date range like _DateTime.ageInDays(user_creation_time)<7 and _DateTime.ageInDays(user_creation_time) > 1 This is only an idea and i have to do more investigation on that, but event policies should be the right way to do that. You can also pull in labels per project so you can use that as well. The Example below find EC2 instances where launch time is more than 30 days. config where api.name = 'aws-ec2-describe-instances' AND json.rule = '_DateTime.ageInDays($.launchTime) > 30' Regards, Torsten Regards, Torsten

tostern · ‎09-18-2020

Hi @pmchenry Yes, @BPry is correct we don't support sub-interfaces in Public Cloud for now. There is no workaround for this. As already mentioned you should plan your design and to avoid this. Regards, Torsten

tostern · ‎09-18-2020

Hi @SYokoyama2 You can access the Compute API with your Prisma Cloud user credentials. Note that only Prisma Cloud users with the System Admin role can access Compute. This can be used for automated workflows, you’ll want to provision a service account with the minimum required permissions.

tostern · ‎09-17-2020

Hi, i recommend that you destroy the environment and redeploy it and following this guide https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/deploy-the-vm-series-firewall-on-aws/launch-the-vm-series-firewall-on-aws.html#ide07b93a2-ccb3-4c69-95fe-96e3328b8514 or use the following script https://github.com/wwce/aws-cft/tree/master/AWS-Ref-Architecture

tostern · ‎09-16-2020

It is really hard to say what is going wrong here without seeing it but i still think that something is wrong with Security Rules, routing, ssh key pair or Internet Gateway. Please review everything against our official guides. Regards, Torsten

tostern · ‎09-16-2020

you can't doing it without having cli access to firewall. Please double check taht you are using the right interface and not that you try to connect to the untrust interface.

tostern · ‎09-16-2020

did you swap the management interface?

tostern · ‎09-16-2020

Hi @careem785 are you using the correct ssh key pair? Look at Step 4 in that document https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/deploy-the-vm-series-firewall-on-aws/launch-the-vm-series-firewall-on-aws.html#ide07b93a2-ccb3-4c69-95fe-96e3328b8514 Then AWS works with ssh key pairs and not with username/password Regards, Torsten

tostern · ‎09-16-2020

when you talk about Azure then create please a NSG as shown below and attach it to the NIC. Then when you using a Public IP (Standard) then is there a implicite deny when you not attach any NSG to it

tostern · ‎09-16-2020

Hi @careem785 where do you deploy it? Azure/AWS/GCP Regards, Torsten

tostern · ‎09-15-2020

Hi @Retired Member, so fare as i am aware and i spoke now with several is there no limititaion. Regards, Torsten

tostern · ‎09-10-2020

Hi @rpili1313 did you checked that in your regions are Availbilty Zones available? Check here please https://azure.microsoft.com/en-us/global-infrastructure/geographies/

tostern · ‎09-10-2020

Hi, it will not chance anything because the problem is not our firewall the problem is on the Azure side and detach and attach process. so it will be still between 2-5 min. Regards, Torsten

Member Since	‎08-01-2017 04:14 AM
Date Last Visited	‎12-12-2023 07:12 AM
Posts	38
Total Likes Received	7

Online Status	Offline
Date Last Visited	‎12-12-2023 07:12 AM

About tostern

Re: NGFW on Azure cannot be deployed successful

Re: Palo Alto 10.0 firewall in HA in Azure

Re: AWS VM-series - untrust interface - eating packets

Re: AWS VM-series - untrust interface - eating packets

Re: AWS VM-series - untrust interface - eating packets

Re: Deploy PA firewall HA in different availability zone in Azure

Re: Deploy PA firewall HA in different availability zone in Azure

Re: Website is slow when put behind vm-series 300

Re: Azure - no traffic to untrust public ip

Re: AWS VM Series Gateway Load Balancers not working

Re: Express Route connection Palo Alto VM Firewall in Azure

Re: Deploy PA firewall HA in different availability zone in Azure

Re: NGFW on Azure cannot be deployed successful

Re: AWS VM-series - untrust interface - eating packets

Re: Panorama HA (Active/Standby) Deployment in Azure

Re: NGFW on Azure cannot be deployed successful

(Ended) Join the discussion: Professional Services - Experts You Can Count On When Protecting Your Business

Re: What is Prisma Cloud access token

Re: What is Prisma Cloud access token

Re: "Show me all Prisma Cloud Monitored Assets with a configuration ch

Re: Sub Interfaces or VLAN interfaces supported on VM-300 in AWS?

Re: What is Prisma Cloud access token

Re: cannot connect to VM-Series Next-Generation Firewall

Re: cannot connect to VM-Series Next-Generation Firewall

Re: cannot connect to VM-Series Next-Generation Firewall

Re: cannot connect to VM-Series Next-Generation Firewall

Re: cannot connect to VM-Series Next-Generation Firewall

Re: cannot connect to VM-Series Next-Generation Firewall

Re: cannot connect to VM-Series Next-Generation Firewall

Re: Is there a limitation to the the database that holds Prisma Cloud EE da

Re: AZURE | Not able to Create Palo Alto NVA with Availability Zone

Re: Express Route connection Palo Alto VM Firewall in Azure

Unlock your full community experience!

About tostern