Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About bambox
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About bambox
3 weeks ago
4Posts
0Likes
0Solutions
Apr 19, 2021Last Visited
User
Activity
User
Profile
Latest posts by bambox
| Subject | Views | Posted |
|---|---|---|
| 113 | 3 weeks ago | |
| 135 | 03-10-2021 02:51 PM | |
| 197 | 03-10-2021 06:34 AM | |
| 204 | 02-05-2021 07:34 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 02-05-2021 07:24 AM |
| Date Last Visited | 3 weeks ago |
| Posts | 4 |
3 weeks ago
We noticed last month that a core firewall PA-3060 has started reporting the same error message as in this link. Application being already in use. We have provided tech support files to PAN support but they are still unable to determine the reason that we keep getting these error messages when we commit to the firewall. https://live.paloaltonetworks.com/t5/general-topics/validation-and-commit-error-after-panorama-upgrade/td-p/157859 Has anyone come across similar issue and have been able to resolve it. We are still not sure why this error message has appeared even though changes done on these firewalls are mostly policy and nat rules and no change on Application content. Your help is highly appreciated.
... View more
03-10-2021
02:51 PM
Thank you so much. I had asked the client to telnet to a hostname instead of an IP for us to create the signature based on the SNI field and it worked!
... View more
03-10-2021
06:34 AM
Hi Team, We have a client who do not have SSL decryption and has many third-party applications working over SSL on different ports other than 443. The client has a security requirement that all applications need to be categorized by Palo alto firewall, so they do not wish to use any service ports in the Service column field. Also, they do not wish to use the Parent App field where a security rule must exist to allow the Parent App for the custom app to be working. So, we have decided to go through that route and create a custom application for their app working over SSL port 8443. And added this signature http/1.1 in hex \x 68 74 74 70 2f 31 2e 31 \x. And this is where everything went downside, all SSL traffic stopped working and all traffic started being recognized as the custom app. Since the amount of information SSL hello is limited, we couldn't find any additional information to add to the custom app. What do you guys suggest to use for custom apps running SSL traffic when you do not have decryption.
... View more
02-05-2021
07:34 AM
Hello everyone, We have an upcoming project where we need to upgrade our 5060 firewalls to 5250. I was unable to find a document that explains like items to consider to do the migration. This is actually my first project so I am trying to think of maybe a guide or a tutorial that I can start with. The main requirement that I have not been able to find information about is they need to have both 5060 and 5250 on the same heartbeat network where they can test the behavior for sometime and ensure there are no issues then make the switch to 5250 and replace the 5060. Have you had any experience implementing this before, and was there any issues during implementation. Also, I am still not sure if interfaces being different could cause an issue during the migration. Any items that you feel important to mention would be highly appreciated. Thanks.
... View more
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
