Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About Ben-Price
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About Ben-Price
yesterday
15Posts
0Likes
0Solutions
Jul 28, 2021Last Visited
User
Activity
User
Profile
Latest posts by Ben-Price
| Subject | Views | Posted |
|---|---|---|
| 68 | yesterday | |
| 53 | yesterday | |
| 121 | Tuesday | |
| 65 | Monday | |
| 34 | Monday |
User Badges
Community Statistics
| Member Since | 05-16-2021 06:01 PM |
| Date Last Visited | yesterday |
| Posts | 15 |
yesterday
Hi All, Does PAN offer a basic guide to troubleshooting using the tech support file e.g. which logs show what information etc?
... View more
yesterday
Hi @BPry Thanks, that is what I thought. I am unable to replicate the issue when I try to create such a rule in my lab, but our client has forwarded me a config file from before they upgraded their Panorama and this type of config looks to be present? (see below). Any ideas?
... View more
Tuesday
Hi All, I have an issue where, Panorama had some security policy rules that had the below configuration on them: “Any” is listed in combination with specific ports under services in a given rule “application-default” is listed in combination with specific ports under services in a given rule The Panorama was then upgraded from 9.0.11 to 9.1.0 and during the upgrade process the Panorama through an error saying that you are unable to have this type of configuration on a security policy rule. The rule's were tidied up and the upgrade completed. My question's are: 1. Obviously that type of config on a rule is redundant, but are you able to have that type of configuration on a security policy rule in Panorama or an a NGFW? When testing having ' any' or 'application default' and a service selected on a security policy, PAN doesn't allow you to do it. The firewall automatically switches to one or the other before you perform the commit. 2. Is this something PAN may have changed between OS releases? 3. Has the upgrade just exposed this incorrect configuration? If so, why was able to be commited in the first place? Thanks in advance for any advise here.
... View more
Monday
Hi @Astardzhiev , my issue turns out to be slightly different after doing some further troubleshooting, but I did lab up your scenario and you are correct the configuration you described, does result in the path monitored static route not being removed from the RIB out table. Once I have a resolution for my issue, I will post here. Thanks.
... View more
Monday
Hi, Is it possible to have 2 static bi-directional NAT rules configured for the same public IP address e.g. mapping one public IP address to 2 internal servers using the below linked config? https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/configure-nat/enable-bi-directional-address-translation-for-your-public-facing-servers-static-source-nat.html I believe this type of config is only possible using destination NAT one-to-many, but I just wanted to check with the community.
... View more
- Tags:
- nat
2 weeks ago
Hi, I have an issue where a Static route that is being path monitored and redistributed into BGP, is not removed from the BGP RIB out table when the monitored path is unreachable. The static route is still populated in the Palo Alto BGP rib out table and is also populated in the BGP peer route table. Any ideas as to what may cause such an issue?
... View more
- Tags:
- BGP RIB
3 weeks ago
@BPry OK thanks for that info. A few questions: So protection from this threat is built into the PAN OS and no need to configure an action within a Vulnerability profile then?
... View more
3 weeks ago
Can anyone assist with this question? Maybe @BPry @reaper could possibly comment.
... View more
3 weeks ago
Hi All, CVE-2004-0230 does not seem to show up in the Palo Alto Networks threat database, but the below KB article seems to indicate that PAN have introduced threat mitigation for this CVE in PAN-OS 6.0. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CllyCAC I am wondering if this is an error in the PA threat database? or if mitigation for this threat has been removed from the PAN OS (which I believe unlikely)? Can anyone shed any light on this issue? Thanks in advance.
... View more
06-07-2021
10:27 PM
Hi, I am just checking to see whether anyone has successfully integrated a PA-5220 wit a Meraki switch? Is there anything I need to look out for? What needs to match on either end of the link: Bandwidth? Duplex? Interface type (e.g. Layer 3 on both ends)? Any advise greatly appreciated. Thanks.
... View more
05-18-2021
02:51 AM
Hi, Does anyone know if its possible to transfer the courses you have completed in your personal Beacon account to your Partner Beacon account? I finished a bunch or courses before starting my new role as Network support engineer and would like to move the certifications from my personal account to my partner accounts. Thanks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
yesterday
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
