Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About Abdul-Fattah
About Abdul-Fattah
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
yesterday
76Posts
12Likes
9Solutions
Apr 12, 2021Last Visited
User
Activity
User
Profile
Latest posts by Abdul-Fattah
| Subject | Views | Posted |
|---|---|---|
| 72 | 3 weeks ago | |
| 161 | 3 weeks ago | |
| 191 | 3 weeks ago | |
| 165 | 3 weeks ago | |
| 301 | 01-14-2021 02:22 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 10-20-2020 01:48 AM | |
| 1 | 10-15-2020 04:38 AM | |
| 1 | 10-19-2020 01:18 AM | |
| 1 | 09-29-2020 08:23 AM | |
| 1 | 09-28-2020 06:04 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 2 |
User Badges
Public Statistics
| Date Registered | 01-05-2020 09:32 AM |
| Date Last Visited | yesterday |
| Total Messages Posted | 76 |
| Total Likes Received | 12 |
3 weeks ago
Hello, if i understond your question correctly, you already have route balancing mechnism configured , if so seems like both traffic matching the same NAT rule. NAT rules need to have what to diffrentiate in "Traffic Matching" between them, that means for example you will need different destionations zones or destionations interfaces...
... View more
3 weeks ago
Hi, well if i understand what you wrote correctly, then that depends on your security Profile on the Firewall, you can make a seperate security rule for that server with a valunrability profile with an exception for that signature that causing the problem
... View more
3 weeks ago
Hi,
in the link below you will find what you are looking for:
https://live.paloaltonetworks.com/t5/expedition-articles/expedition-supported-3rd-party-vendor-matrix/ta-p/336922
... View more
01-14-2021
02:22 AM
@MickBall <p> Primary Username field you should be able to seen the Domain and above in the search field you can enter the domain to filter only the wanted users</p>
... View more
01-13-2021
06:15 AM
Hello,
you can use Palo Alto migration tool Expedition for details:
https://www.paloaltonetworks.com/products/secure-the-network/next-generation-firewall/migration-tool
... View more
01-13-2021
06:12 AM
you can check the list of users who are connecting or previously were connected to GP from: Network > Globalprotect > Gateway> Remote user > previuos user, you can search for the group you want or you can export the list and do the search and processing that meet your requirements.
... View more
10-20-2020
01:48 AM
1 Kudo
Hello @palomed , Expedition is the Palo Alto Migration tool, and ASA is avalable to migrate from. you can migrate objects as also cleaning the unused after. https://live.paloaltonetworks.com/t5/expedition-migration-tool/ct-p/migration_tool
... View more
10-19-2020
01:18 AM
1 Kudo
Hi, unfortunately it is not available.
... View more
10-15-2020
04:38 AM
1 Kudo
you will need to go to settings and sing-out
... View more
10-14-2020
04:59 AM
ping doesnt need a port, and for ms-rdp probably they are using NAT or even 3389 defined in same TCP4001. as i already mentinied that is how security policy in PA works. good luck.
... View more
10-14-2020
02:44 AM
no that will not work, because services is selected and only 4001 is allowed, when selected you will need to enter all port that you want to allow or deny that means the dns port.....
... View more
10-14-2020
01:30 AM
Application and services are handled seperatly, that means you will need to list all applications that you need, and all services that you need. an example if the traffic has been identified as Facebook:Port 80,443, then application tab should list facebook and services set to selected then services will need to list all ports that facebook will need. another exmple if the firewall identified the traffic as Unknown TCP:Port 7010, and application tab lists Unkown-tcp, but services selected and port 7010 not listed, the traffic wont match the rule. hope now it is more clear.
... View more
10-14-2020
12:56 AM
Hi @ManuShankar, you can edit the windows registry to change the default of 1 Day. but as far as i know windows handels DNS very well, and store only valid DNS, so that should not be the problem. but you will need to check this behavior further as i mentined the problem could be that the GP-users internet traffic going through the tunnel, because ive seen this before in my case the traffic was going thoruhg the tunnel to the internet which gave the users a Public ip that it can not reach the other service (in your case SFTP Public IP).
... View more
10-14-2020
12:50 AM
well that depends how you will organize your security policies, so when you search for a policy your created before it will make sense to the admin.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
yesterday
|
Latest Tags
No tags yet
Likes From
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
