Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About Raido_Rattameister
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About Raido_Rattameister
05-06-2022
802Posts
280Likes
118Solutions
May 06, 2022Last Visited
User
Activity
User
Profile
Latest posts by Raido_Rattameister
| Subject | Views | Posted |
|---|---|---|
| 341 | 01-24-2022 06:09 AM | |
| 323 | 01-20-2022 08:25 PM | |
| 380 | 01-20-2022 08:19 PM | |
| 492 | 11-12-2020 11:49 PM | |
| 751 | 11-12-2020 11:36 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 03-22-2018 10:24 AM | |
| 1 Like | 04-15-2016 03:01 AM | |
| 1 Like | 05-03-2016 09:20 AM | |
| 1 Like | 05-15-2017 10:56 AM | |
| 3 Likes | 07-23-2019 12:30 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 2 Likes | |||
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 02-10-2015 12:44 AM |
| Date Last Visited | 05-06-2022 01:04 AM |
| Posts | 802 |
| Total Likes Received | 280 |
01-24-2022
06:09 AM
Destination zone is decided based on routes in virtual router so yes routing table. If you have Policy Based Forwarding rules that overlap with virtual router then PBF route will take precedence over virtual router.
... View more
01-20-2022
08:25 PM
If you take packet capture on Palo interface Eth1/15 do you see incoming DHCP discover packets?
... View more
01-20-2022
08:19 PM
URL filtering kicks in after traffic has already matched to the security policy. You could test adding FQDN type address objects for " Vendor List" domains and place those FQDNs into "Vendor Safelist" policy destination address field. In this case firewall will resolve those addresses to IP and "Vendor Safelist" policy will only match if traffic goes to IPs that host "Vendor List" websites.
... View more
11-12-2020
11:49 PM
Do you mean pre-logon feature that is available from 5.2.x using credentials? Have you tried certificate based pre-logon authentication setup for Macs?
... View more
11-12-2020
11:36 PM
Hey, To get root cert of the site just go to the URL with browser. Click on padlock and choose certificate. Certificate Path Choose top cert View certificate Copy to file And import into Palo
... View more
07-13-2020
05:55 AM
From 9.1 you can't commit unless all dynamic peers have same crypto profile.
... View more
07-12-2020
08:07 PM
Are your peers configured with dynamic IPs?
... View more
04-21-2020
08:16 PM
It is always safer to create 2 NAT policies for DNAT and SNAT than bi-direcitonal. If you check bi-directional NAT rule in cli you can see that for DNAT source zone will be "any". For your TCP RST problem. Most likely your security policy is incorrect. Are you using pre-nat IP and post-nat zone in security policy?
... View more
07-23-2019
12:30 PM
3 Kudos
When you purchased Panorama you got serial number for it. Go to Assets > Devices > Register new device After that you should have access to download Panorama images.
... View more
07-22-2019
01:47 PM
Is it new setup and has never worked? Are you using user or computer certificates?
... View more
07-22-2019
01:03 PM
1 Kudo
Panorama uses 33% of log disk space for logd database for downgrade compatibility. If you don't have plan to downgrade to pre-8.0 it is wasted space. There is feature request 10931 to get rid of it. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5aCAC
... View more
04-11-2019
01:41 PM
You need IP on tunnel interface only if you do dynamic routing or tunnel monitoring.
... View more
04-11-2019
11:44 AM
debug dataplane packet-diag clear filter-marked-session all https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClgDCAS
... View more
04-11-2019
09:59 AM
Use 10.248.250.10/32 as IP on tunnel interface. Then you are fine.
... View more
04-11-2019
08:24 AM
As step 1 you need to enable ssl decryption to start this working.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-06-2022
01:04 AM
|
Likes Given To
Likes From
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks
