This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About slp-security
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About slp-security
05-24-2022
19Posts
2Likes
0Solutions
May 24, 2022Last Visited
User
Activity
User
Profile
Latest posts by slp-security
| Subject | Views | Posted |
|---|---|---|
| 743 | 03-13-2022 09:20 AM | |
| 1587 | 07-01-2021 12:10 AM | |
| 597 | 05-27-2021 07:35 AM | |
| 1734 | 05-26-2021 10:47 AM | |
| 1569 | 05-26-2021 05:51 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 03-13-2022 09:20 AM |
User Badges
Community Statistics
| Member Since | 01-24-2019 05:27 AM |
| Date Last Visited | 05-24-2022 01:29 AM |
| Posts | 19 |
| Total Likes Received | 2 |
03-13-2022
09:20 AM
2 Kudos
Hi, I faced this issue last year. Basically, GP doesn't support 2 IPs for the same FQDN... For exemple, if the first gateway is done, GP simply returns error message like 'cannot connect to gateway' and never tries to reach the second (alive) one... HA
... View more
07-01-2021
12:10 AM
Hi, I have already deployed (many times) such kind (almost) of configuration (PA L3 mode + Pelink in front in our case) but we uses a L2 switch (two in fact to provide HA) between the external interface of the PA and internal interface of the Peplink... If you use L2 mode (VWIRE) on PA interface, just be careful with Spanning-Tree.. Regards, HA
... View more
05-27-2021
07:35 AM
Hello,
We encounter the following issue since today on our Minemeld VM
Error retrieving minemeld metrics: Internal Server Error
as shown on the capture file.
We searched online and saw that it might be related to the process collectd, but we tried to restart it didn't change anything and restarting the VM didn't change anything either.
Did someone got the same issue?
Thanks
... View more
05-26-2021
10:47 AM
Hi,
We applied the recommended command. After that the container starts correctly, but...
If we stop it, the container cannot start once again...
# cat docker-compose.yml version: '3'
services: expedition: image: jlegarreta/expedition:latest restart: always volumes: - ./data:/data - ./db:/var/lib/mysql ports: - 8006:80 - 8106:443 - 8107:4050 cap_add: - SYSLOG
Starting all services for expedition... * Starting rsyslogd... * Starting enhanced syslogd rsyslogd ...done. * Starting sshd... * Starting OpenBSD Secure Shell server sshd ...done. * Starting rabbitmq... * Starting RabbitMQ Messaging Server rabbitmq-server ...done. * Starting mysql... * Starting MariaDB database server mysqld ...fail!
We are a little bit lost...
Regards,
HA
... View more
05-26-2021
05:51 AM
Hi all,
I installed Expedition in docker mode (deployed ON AWS). From LAN side (via IPSec VPN), no issue... If I use AWS ELB+WAF, so CLIENT->AWS ELB+WAF-> DOCKER+EXPEDITION, I received CSRF Token error... Clearer the cache of the browser doesn't help... Any idea ??
Regards,
HA
... View more
05-18-2021
08:27 AM
Current file...
version: '3' services: expedition: image: jlegarreta/expedition:latest restart: always volumes: - ./data:/data - ./db:/var/lib/mysql ports: - 8006:80 - 8106:443 - 8107:4050
... View more
05-18-2021
08:24 AM
Hi,
What will be the syntax in the docker-compose file (very newbie with docker...) ?
Many thanks for your help.
Regards,
HA
... View more
05-17-2021
10:59 PM
Hi all,
I installed the last version of expedtion docker image on Ubuntu (running on AWS).
The installation was running fine but once I created the fist project (and importing a PA config file) the docker image refuse to start...
Starting all services for expedition... * Starting rsyslogd... * Starting enhanced syslogd rsyslogd rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted. rsyslogd: activation of module imklog failed [v8.2102.0 try https://www.rsyslog.com/e/2145 ] ...done. * Starting sshd... * Starting OpenBSD Secure Shell server sshd ...done. * Starting rabbitmq... * Starting RabbitMQ Messaging Server rabbitmq-server ...done. * Starting mysql... * Starting MariaDB database server mysqld ...fail!
root@ip-100-64-6-5:/efs/expedition# cat docker-compose.yml version: '3'
services: expedition: image: jlegarreta/expedition:latest restart: always volumes: - ./data:/data - ./db:/var/lib/mysql ports: - 8006:80 - 8106:443 - 8107:4050
What could be the problem ??
Regards,
HA
... View more
09-17-2020
07:54 AM
Hi, Basically what I want to do... https://www.bitbodyguard.com/articles/palo-alto-networks/google-cloud-identity-as-saml-idp/ But with AWS... Regards, HA
... View more
09-17-2020
06:56 AM
Hi all, I'm looking for a configuration guide to implement SAML authentication for Global Protect users using AWS ? Basically I want to do the same like this (Azure in this case)... https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PP33CAG Which service do I need on AWS ? Cognito or IAM ? Regards, HA
... View more
07-11-2020
04:14 AM
Hi, I also noticed this behaviour with 9.0.9 (maybe other)... Regards, HA
... View more
06-12-2020
07:32 AM
Hi all, First, I 'm pretty with AWS... VPC is configured in the range 10.0.0.0/16. I have a firewall (PA VM) deployed with 3 interfaces (Untrust, DMZ, Trust). Untrust: 10.0.0.0/24, Internal : 10.0.1.0/24 (FW.1) , DMZ : 10.0.99.0/24 (FW.1). I created 3 Routing tables for each zone and assign each subnet into the RT. I changed the default route for routing table DMZ and Internal, pointing to the FW. Because each routing table (focusing on DMZ and Trust here) has a default entry (10.0.0.0/16) pointing to local that cannot be changed, it's possible to pass traffic from DMZ to Internal WITHOUT traversing the firewall. I created two self referencing security group (SG-TRUST and SG-DMZ) and assign it to each ENI (FW ENI and host ENI). Now traffic is blocked (so bypassing fw is not possible anymore) but routes needs to be added on each host to pass traffic from Trust to DMZ (and reverse) ON DMZ Host 10.0.1.0/24 gw 10.0.1.99.1 (FW) ON Internal Host 10.0.99.0/24 gw 10.0.1.1 (FW) Is it possible to avoid creating this static routes on the host and force traffic to traverse the firewall (configuration on the routing table) ? Regards, HA
... View more
03-05-2020
12:40 AM
Hi all, Does anybody known how to integrate Palo Alto with Menlo Security Solution ? The goal is to transparently redirect HTTP/HTTPS traffic to Menlo appliance for specific URL Categories... Any idea ?? Regards, HA
... View more
10-17-2019
12:07 AM
Hi, First, thanks for your help. OK I solved the issue. The API key was not correct... Regards, HA
... View more
10-16-2019
07:14 AM
Hello, I'm trying to integrate Minemeld with MISP. I followed https://github.com/PaloAltoNetworks/minemeld-misp Which URL of MISP (public) do I need to provide on the Prototype parameter ? Regards, HA
... View more
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks