Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About atluri4b8
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About atluri4b8
06-04-2020
11Posts
3Likes
1Solution
Jun 04, 2020Last Visited
User
Activity
User
Profile
Latest posts by atluri4b8
| Subject | Views | Posted |
|---|---|---|
| 45261 | 03-19-2020 10:56 AM | |
| 46058 | 03-12-2020 12:11 PM | |
| 46070 | 03-12-2020 12:05 PM | |
| 1677 | 03-11-2020 11:58 AM | |
| 1234 | 03-11-2020 10:38 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 03-11-2020 10:20 AM | |
| 1 Like | 03-11-2020 08:32 AM | |
| 1 Like | 03-09-2020 09:08 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 7 Likes |
Retired Member
|
by
Retired Member
| |
| 1 Like |
User Badges
Community Statistics
| Member Since | 03-06-2020 06:06 AM |
| Date Last Visited | 06-04-2020 11:30 AM |
| Posts | 11 |
| Total Likes Received | 3 |
03-19-2020
10:56 AM
@Matthew.Sherman If you can login to the GUI and Monitor>Traffic, we can find the traffic logs. You can select all the columns that can be viewed in that traffic monitor tab. Over there you can check the "rule" column to be displayed, then filter out the Source and Destination IP address. You can find the rule which is allowing/denying the traffic. This process worked for me previously. Hope this helps.
... View more
03-12-2020
12:11 PM
@jpage386 Hey, did you find a way to filter out the unused rules, in order to get a report of the unused rules. Please let me know. Thanks.
... View more
03-12-2020
12:05 PM
Hi @Anders_Bohman Did you find a way to filter out the unused rules to generate a report. Please let me know. Thanks.
... View more
03-11-2020
11:58 AM
@AhmedMoustafa When we are upgrading the OS on a HA pair, f or active/passive firewalls, must upgrade the passive peer first, suspend the active peer (fail over), update the active peer, and then return that peer to a functional state (fail back). To prevent fail over during the upgrade of the HA peers, must make sure preemption is disabled before proceeding with the upgrade. We only need to disable preemption on one peer in the pair. You can check the upgrade steps in the link below. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/upgrade-to-pan-os-90/upgrade-the-firewall-to-pan-os-90/upgrade-an-ha-firewall-pair-to-pan-os-90.html
... View more
03-11-2020
10:38 AM
Hi @johnde I just found a Expedition User Guide. Hope this might help you. https://live.paloaltonetworks.com/t5/Expedition-Articles/Expedition-User-Guide-v1-2/ta-p/285157 Thanks.
... View more
03-11-2020
10:20 AM
1 Kudo
@DanTheMan In the filter, you can modify it as ( app eq dns ) and ( port.dst eq 53 ) and ( addr.dst notin 8.8.8.8 ). This helps in filtering the dns traffic excluding the traffic going to 8.8.8.8. Hope this helps.
... View more
03-11-2020
08:55 AM
@Ambidexter6 On the firewall, you can check the status of connection to the panoramas by this command - "show panorama-status" in user-exec mode. On the Panorama, you can check by these commands - "show devices all"/"show devices connected" in user-exec mode. Hope this helps.
... View more
03-11-2020
08:32 AM
1 Kudo
Hi @Ambidexter6 In the Individual firewalls, the IP address of the Peer Panorama might be missing on the devices which are being displayed as disconnected. Can you check it out. Thanks.
... View more
03-11-2020
07:20 AM
@DGonzalezAR The HA peers should have the same version of PAN-OS and content version, in order to set them into a HA pair. Refer to the documentation below on the HA overview for further details, https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/high-availability/ha-overview.html Thanks.
... View more
03-11-2020
06:03 AM
Hi @MohammedAsik A total of 1024 concurrent tunnels can connect to GlobalProtect Client VPN, while a maximum of 200 tunnels to GP Clientless VPN. For more details on various other firewall models, refer to the link below. https://www.paloaltonetworks.com/products/product-selection# Thanks.
... View more
03-09-2020
09:08 AM
1 Kudo
@MarioMarquez, the passive firewall is not exactly passing the traffic. You can still see the active connections only because of the session synchronization between the HA pair firewalls. In the active/passive configuration, you can find all other sessions except for ICMP sessions if you observe keenly. In the active/active configuration, ICMP, Host sessions & Multicast sessions are not synchronized. This session synchronization helps in avoiding any loss of service, in case of any hardware/software disruption occurs. Hope this helps.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-04-2020
11:30 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
