Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About batd2
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About batd2
05-19-2022
88Posts
15Likes
7Solutions
May 19, 2022Last Visited
User
Activity
User
Profile
Latest posts by batd2
| Subject | Views | Posted |
|---|---|---|
| 73 | 05-13-2022 02:37 AM | |
| 104 | 05-12-2022 01:01 AM | |
| 141 | 05-12-2022 12:56 AM | |
| 319 | 03-02-2022 06:23 AM | |
| 380 | 02-27-2022 10:34 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 05-12-2022 01:01 AM | |
| 1 Like | 12-09-2021 07:42 AM | |
| 1 Like | 10-25-2021 02:05 AM | |
| 1 Like | 09-29-2021 06:42 AM | |
| 3 Likes | 09-15-2021 06:22 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 2 Likes | |||
| 2 Likes | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 01-17-2020 07:36 AM |
| Date Last Visited | 05-19-2022 07:45 AM |
| Posts | 88 |
| Total Likes Received | 15 |
05-13-2022
02:37 AM
@JANARTHANAN1392 Another possible reason for the different browser behaviour could be the Quic protocol used by Chrome and Edge, which is Chrome based. Please see article below. You can try blocking quic as recommended: Palo Alto Networks recommends creating a security policy in the firewall to block the QUIC application. With the QUIC traffic getting blocked by the Firewall, the Chrome browser will fall back to using traditional TLS/SSL. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClarCAC
... View more
05-12-2022
01:01 AM
2 Kudos
@TWENetwork The best practice is to upgrade to the recommended release of 10.0.10 first, before upgrading to 10.1.5. So if you following this your upgrade path will be: - Download and Install 10.0.10 - Reboot - Download and (optionally) install 10.1.0 - Download and install 10.1.5 - Reboot
... View more
05-12-2022
12:56 AM
@JANARTHANAN1392 Do you use proxy in your environment? Browser can be configured to use or bypass your companies proxy and this would explain different connectivity behaviour when using different browsers.
... View more
03-02-2022
06:23 AM
Anyone able to help?
... View more
02-27-2022
10:34 AM
I have a script which is doing report on multple Panorama securirty policies. It is working ok using the API, but I need run it offline using the panorama config file. My understanding is that I should be able to do it using the refresh_from_xml() module, but I am keep on getting errors when using it. As an example refreshall() is working fine: device_groups = panorama.DeviceGroup.refreshall(pano, add=True) but refresh_from_xml returns differenet errors: device_groups = panorama.DeviceGroup.refreshall_from_xml(xml = 'running-config.xml', refresh_children = True)
TypeError: refreshall_from_xml() missing 1 required positional argument: 'self' Did you have any success running the framwork agains a config file and can you help me with it?
... View more
02-22-2022
07:44 AM
@alextsa There is no specific allow/block lists as such. You create a custom URL categories in " Objects > Custom Objects > URL Category". One for the custom URLs you like to block and one for allow. Then under your URL filtering profile, you assigned the required actions - block and alert respectively.
... View more
02-22-2022
06:01 AM
@BigPalo The answer is in your output - it is failing because your host does not trust the certificate used by the firewall to decrypt traffic. [FAIL] SSL peer certificate does not validate
[FAIL] Hostname does not match when validating certificates.
[WARN] Using a self-signed certificate
[HELP] cURL Error (60) Peer's certificate issuer has been marked as not trusted by the user. You can trying ignoring certificate check on your host or import the firewall certificate into your hosts' certificate trust store.
... View more
02-22-2022
05:49 AM
@NetWorker01 Unless your firewall is managed by Panorama, then it is not an easy change. The problem is that the HA interfaces changed between the 5000 and 5200 series and just loading the configuration will not work. Your options are indeed the ones in the KB article you discovered: migration tool, load config partial or modifying the XML. They will give you the required result, however none of them is simple, if you have never used the methods before.
... View more
02-10-2022
10:23 PM
I am looking at exactly the same question. My understanding is also that content inspection will happen when overriding to an existing AppID, however I could not find any PA article explaining that. They all say that inspection stops at Layer 4: can someone someone point me to the KB or admin guide confirming the behaviour?
... View more
02-03-2022
07:15 AM
Can you help me with an idea of how I can use the SDK on a Panorama configuration file, rather than connecting to the Panorama API. It will be used for running reports on configuration elements (understandably not for configuration changes) in an restricted environment where API calls from a host to Panorama are not allowed. I see that the framework uses the Panroama XML API, so it should not be difficult to create SDK panorama object from an XML configuration file, but I am jus stuck and can't get it to work.
... View more
12-10-2021
01:40 AM
@BPry This is frustrating and kind of defeats some of purpose of the audit comments. I will probably submit a feature request about it
... View more
12-09-2021
09:36 AM
Do you know how can we configure and view Panorama security policy audit comments in the cli or another way for bulk applying comments to policies. I will modify policies in bulk using the cli set commands, but also want to add audit comment to all the policies with the change description, but I can't find the cli option for it.
... View more
12-09-2021
07:42 AM
1 Kudo
@matthew.litchfield Here is the course link. Looks like the they changed the name to 9.1, but the topics are still 9.0 https://beacon.paloaltonetworks.com/student/path/642692-firewall-9-1-essentials-configuration-and-management
... View more
12-09-2021
07:37 AM
@jagannathkale Maybe you can share some config snippets/screenshots to better understand the issue?
... View more
12-02-2021
05:09 AM
@Naspers There is a bit of misconception about how the API keys work on firewalls/Panorama. The keys are not "generated" and thus not saved. The key a hash function of the account username, password and time/date of generation (and this is the reason you get different key every time). The key lifetime was introduced in PanOS9. Before 9, the API key was only a function of the username and password and you used to get the same every time you "generate" it. So when you send the key to firewall, it user its algorithm to convert it to the date/time of generation, username and password. If the time is within you API configured lifetime, then the username and password will be used for authentication. If not or if you changed the password, then authentication will fail.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-19-2022
07:45 AM
|
Latest Tags
No tags yet
Likes From
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks
