Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About JimMcGrady
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About JimMcGrady
05-23-2022
78Posts
18Likes
0Solutions
May 23, 2022Last Visited
User
Activity
User
Profile
Latest posts by JimMcGrady
| Subject | Views | Posted |
|---|---|---|
| 28 | 05-23-2022 06:38 PM | |
| 144 | 05-16-2022 10:58 PM | |
| 184 | 04-28-2022 09:22 PM | |
| 182 | 04-26-2022 01:58 AM | |
| 221 | 04-26-2022 01:38 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 04-03-2022 07:34 PM | |
| 4 Likes | 03-13-2022 08:47 PM | |
| 1 Like | 10-20-2021 07:18 PM | |
| 2 Likes | 06-23-2021 05:50 PM | |
| 1 Like | 06-21-2021 09:31 PM |
User Badges
Community Statistics
| Member Since | 12-08-2015 07:28 PM |
| Date Last Visited | 05-23-2022 09:59 PM |
| Posts | 78 |
| Total Likes Received | 18 |
05-23-2022
06:38 PM
Hi Scott. Traffic initiated from internet passes through the outside load balancer (standard public SKU) to the Palo pair, and then straight to the backend servers. I am using port Natting between the outside LB and the Palo pair to allow traffic differentiation. Without a source NAT, the reply traffic uses the user defined route which sets the inside load balancer (standard sku internal) as its next hop. a traffic capture sees this delivered to either Palo, not necessarily to the one the original traffic came through.
... View more
05-16-2022
10:58 PM
I have a pair of VM300 gateways running 9.1.13 in Azure. I'm using a 'load balancer sandwich' approach to provide active active HA. The public load balancer in front of the firewalls does a good job of delivering inbound traffic. However, routing to the internal destinations from the inside of the firewalls isnt ideal currently. I find i have to source nat the traffic to each firewall's internal interface if i want the replies to take the correct return path. This loses the original internet client's real IP. Without this source natting, even if the return traffic routes correctly to the firewall pair, it may not egress out the same gateway that it entered through. Making the traffic lose state. Is there another way i can use two firewalls in active active HA and have the return traffic flow correctly?
... View more
04-28-2022
09:22 PM
Is it possible to make Panorama 10.1 look and feel like 9.1? I find the colors and fonts used in 10.1 harder to read.
... View more
- Tags:
- management
04-26-2022
01:58 AM
When configuring a site to site IPSEC tunnel, i see that the IKE gateway can be set to allow packet fragmentation or not (DF bit) when using IKEv1. However the option isn't present for IKEv2. Other vendors, such as Cisco, allow the DF bit to be set for IKEv2. Why is this the case with Palo Alto (v9.1.x)?
... View more
04-26-2022
01:38 AM
A question - on the Palo end, where in the config is the DF bit set?
... View more
04-03-2022
07:34 PM
2 Kudos
CVE-2022-0778 Impact of the OpenSSL Infinite Loop Vulnerability CVE-2022-0778 (paloaltonetworks.com) Further to this one, it mentions that Globalprotect is affected but doesnt say whether a client software update is required. Do you know if the Globalprotect client will need updating?
... View more
03-13-2022
08:47 PM
4 Kudos
Xsoar seems like a much bigger system than Minemeld or Autofocus. A simple list aggregator and EDL formatter is all i need.
... View more
03-13-2022
08:41 PM
Xsoar seems like a much bigger system than Minemeld or Autofocus. Is there anything that simply does the threat list aggregation and formatting for Palo, without all the other functions?
... View more
12-16-2021
11:10 PM
I have always found this failover mechanism within Azure to be impractically slow. I look forward to the day when it improves.
... View more
12-16-2021
10:58 PM
From the command line of a next generation firewall i can use 'ping host blah'. Does the CLI have a command to ping a destination via TCP? Or some other tool to do the same?
... View more
12-16-2021
10:52 PM
Ive found the symmetric flow to be an issue. I have an external client coming in through an Azure public load balancer, through my pair of PA firewalls, and into an internal load balancer which delivers the traffic to the servers. However the reply traffic doesnt work unless i make the firewalls source NAT the inbound traffic. The default route outbound from the backend servers is an internal load balancer across the two firewalls. sometimes the reply traffic goes back through the other firewall, therefore breaking symmetry.
... View more
12-12-2021
04:47 PM
I'm running a 9.1 firewall with threat protection and wildfire. How do i check that a specific threat signature is turned on and blocking?
... View more
10-20-2021
07:18 PM
1 Kudo
That was exactly it! Second PSU was not getting power. Thanks
... View more
10-18-2021
10:22 PM
I have a new PA-850 firewall. Its cooling fans are very loud even when idle. Is there a setting where the fan speed can be adjusted?
... View more
10-11-2021
07:17 PM
I have a custom traffic report which lists source address, dest address, application, and sessions. The web page result of the report populates 'source host name' and 'destination host name' results with names - either address object names or FQDN resolved names. However, when i export the report as PDF or CSV it just lists IP addresses instead of names. How would i get it to use names?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-23-2022
09:59 PM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks
