Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About Raido
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About Raido
yesterday
7Posts
275Likes
118Solutions
Apr 22, 2021Last Visited
User
Activity
User
Profile
Latest posts by Raido
| Subject | Views | Posted |
|---|---|---|
| 136 | 11-12-2020 11:49 PM | |
| 264 | 11-12-2020 11:36 PM | |
| 1848 | 07-13-2020 05:55 AM | |
| 1737 | 07-12-2020 08:07 PM | |
| 1974 | 04-21-2020 08:16 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-03-2016 09:20 AM | |
| 1 Like | 05-15-2017 10:56 AM | |
| 2 Likes | 07-23-2019 12:30 PM | |
| 1 Like | 07-22-2019 01:03 PM | |
| 2 Likes | 10-22-2015 02:05 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 2 Likes | |||
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 02-10-2015 12:44 AM |
| Date Last Visited | yesterday |
| Posts | 799 |
| Total Likes Received | 275 |
11-12-2020
11:49 PM
Do you mean pre-logon feature that is available from 5.2.x using credentials? Have you tried certificate based pre-logon authentication setup for Macs?
... View more
11-12-2020
11:36 PM
Hey, To get root cert of the site just go to the URL with browser. Click on padlock and choose certificate. Certificate Path Choose top cert View certificate Copy to file And import into Palo
... View more
07-13-2020
05:55 AM
From 9.1 you can't commit unless all dynamic peers have same crypto profile.
... View more
07-12-2020
08:07 PM
Are your peers configured with dynamic IPs?
... View more
04-21-2020
08:16 PM
It is always safer to create 2 NAT policies for DNAT and SNAT than bi-direcitonal. If you check bi-directional NAT rule in cli you can see that for DNAT source zone will be "any". For your TCP RST problem. Most likely your security policy is incorrect. Are you using pre-nat IP and post-nat zone in security policy?
... View more
07-23-2019
12:30 PM
2 Kudos
When you purchased Panorama you got serial number for it. Go to Assets > Devices > Register new device After that you should have access to download Panorama images.
... View more
07-22-2019
01:47 PM
Is it new setup and has never worked? Are you using user or computer certificates?
... View more
07-22-2019
01:03 PM
1 Kudo
Panorama uses 33% of log disk space for logd database for downgrade compatibility. If you don't have plan to downgrade to pre-8.0 it is wasted space. There is feature request 10931 to get rid of it. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5aCAC
... View more
04-11-2019
01:41 PM
You need IP on tunnel interface only if you do dynamic routing or tunnel monitoring.
... View more
04-11-2019
11:44 AM
debug dataplane packet-diag clear filter-marked-session all https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClgDCAS
... View more
04-11-2019
09:59 AM
Use 10.248.250.10/32 as IP on tunnel interface. Then you are fine.
... View more
04-11-2019
08:24 AM
As step 1 you need to enable ssl decryption to start this working.
... View more
04-11-2019
08:13 AM
According to policy: "Devices that are currently end-of-sale cannot be re-certified. For our current end-of-life policy and listing of products, please see our support web site." PA-500 went end-of-sale year ago. https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-sale
... View more
04-10-2019
06:29 AM
2 Kudos
If you open URL Filtering profile there is "URL Filtering Settings" tab. Last option is "X-Forwarded-For" If you check it then Palo will capture real source IP from the http session and log it. Proxy must add X-Forwarded-For to the traffic and unless you decrypt ssl you see this only for http sessions not https. You would need to be inline with vwire to decrypt. Maybe they can switch proxy to transparent mode. Also if you don't want to expose internal IPs then would be nice to strip this information after it passes Palo. Device > Setup > Content-ID > X-Forwarded-For Headers > Strip X-Forwarded-For Header
... View more
04-05-2019
12:36 PM
1 Kudo
If you don't need interface IP to be object replace it back with regular IP and change object to /32. If you do need then create 2 objects. One for interface with /29 and other for security policies with /32
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
yesterday
|
Likes Given To
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
