Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- ›
- About CoreHR
About CoreHR
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
12-22-2020
7Posts
1Like
1Solution
Dec 22, 2020Last Visited
User
Activity
User
Profile
Latest posts by CoreHR
| Subject | Views | Posted |
|---|---|---|
| 571 | 12-22-2020 08:03 AM | |
| 1717 | 04-16-2020 12:53 AM | |
| 1759 | 04-15-2020 11:46 AM | |
| 1785 | 04-15-2020 10:56 AM | |
| 814 | 12-17-2019 02:59 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 12-17-2019 02:59 AM |
User Badges
Public Statistics
| Date Registered | 08-09-2019 05:50 AM |
| Date Last Visited | 12-22-2020 11:53 AM |
| Total Messages Posted | 7 |
| Total Likes Received | 1 |
12-22-2020
08:03 AM
It will be responding because you haven't specifically blocked the traffic and intrazone traffic is allowed by default. Just set up a rule that blocks outside-to-outside traffic on UDP 53 and that should stop it. I set up rules to deny all inbound traffic that isn't on the specific ports I'm expecting, just to reduce a bit of CPU load.
... View more
04-16-2020
12:53 AM
I think you're trying to use a hammer to drill a hole. Even the illustrations that Palo Alto are using that include the internet show SAAS applications at the other side which implies that Prisma Access is acting as the remote SD-WAN device. Are you using ECMP at all? I think that is where I will be looking once our second link is in place.
... View more
04-15-2020
11:46 AM
I've looked at the documentation, and to me it suggests that SD-WAN does need something at the other end, otherwise you might as well just ping 8.8.8.8 and fail between outgoing interfaces, no? Looking at this document: https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/configure-sd-wan/sd-wan-traffic-distribution-profiles.html I don't see that there's any logic for the internet side of things at all, the traffic steering only takes place over the VPN links between offices based on the path quality profiles that you'd be configuring. If I'm wrong, somebody please correct me.
... View more
04-15-2020
10:56 AM
SD-WAN monitors the other end of the link which should be another Palo Alto device configured with SD-WAN. Have you done this? Or do you just have a single device?
... View more
12-17-2019
02:59 AM
1 Kudo
Turns out it wasn't an issue with my config, the remote VPN admin had given me the wrong settings so the ipsec tunnel wasn't coming up.
... View more
12-16-2019
05:17 AM
And a quick follow-up: there are no NAT rules in place - are they required?
... View more
12-16-2019
04:45 AM
Hi all, Here's what I'm trying to do - I have a PA firewall with two VPNs - let's call them A and B. I'm trying to work out how to get traffic from site A to route through to site B, but it's eluding me - the site B tunnel doesn't come up. I have tunnel.198 to Site A with a route passing 192.168.24.0/21 traffic to that tunnel, and tunnel.300 with a route passing 10.10.27.2/32 to that tunnel. I've added proxy IDs to the A/B VPNs so that the site A VPN is advertising the site B network and vice versa. Clearly I'm misunderstanding how this is supposed to work - can somebody clarify?
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
