Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About bat
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About bat
02-18-2017
6Posts
81Likes
38Solutions
Feb 18, 2017Last Visited
User
Activity
User
Profile
Latest posts by bat
| Subject | Views | Posted |
|---|---|---|
| 2476 | 06-25-2015 05:34 PM | |
| 3615 | 04-23-2015 05:03 PM | |
| 3615 | 04-23-2015 02:04 PM | |
| 5331 | 03-19-2015 04:38 PM | |
| 1273 | 03-05-2015 06:40 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 06-23-2014 01:40 PM | |
| 1 Like | 12-11-2014 03:42 PM | |
| 1 Like | 09-18-2014 05:00 PM | |
| 1 Like | 10-07-2014 08:52 AM | |
| 1 Like | 09-16-2014 04:58 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 3 Likes |
User Badges
Community Statistics
| Member Since | 06-20-2014 04:47 PM |
| Date Last Visited | 02-18-2017 09:37 PM |
| Posts | 263 |
| Total Likes Received | 74 |
06-25-2015
05:34 PM
1 Kudo
Hi cjsteele To know the status of rule query should be: https:// <ip>/api/?type=config&action=get&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='<rule-name>']/disabled Let me know if this is what you are looking for.
... View more
04-23-2015
05:03 PM
1 Kudo
If Panorama fails, then you can disable Panorama Policy and Objects Under Device > Setup > Panorama. While disabling you get the option to locally save the Policies and Objects (Same for Device and Network Template) which then you can edit later. Please do mark helpful/correct answers.
... View more
04-23-2015
02:04 PM
1 Kudo
I don't think you can. You will have to change it through Panorama
... View more
03-19-2015
04:38 PM
3 Kudos
Hi alexander.graser Yes the application is excluded from SSL decryption but if the SSL connection is rejected right away by server i.e. server does not send a HELLO in response to HELLO from client SSL decryption exclude list will not be checked. To have the application excluded you will have to create a no-decrypt policy for URL update.microsoft.com, *.update.microsoft.com Hope it helps!
... View more
03-05-2015
06:40 PM
1 Kudo
Hey cgaona Please go through this: Re: Tengo problemas con PAN no puedo entrar por via web
... View more
03-05-2015
01:15 PM
Hi prestonhartley I don't think you can suppress type 5 LSA on the firewall.
... View more
03-04-2015
12:49 PM
1 Kudo
I tried this and worked, I think you missed the space after '[' [edit rulebase security rules TESTRULE] firewall# set destination [ HOST1 HOST2 ] ***Please do mark helpful/correct answers
... View more
03-04-2015
11:40 AM
Just do set destination HOST1 set destination HOST2
... View more
02-27-2015
02:48 PM
sphippen URL encode for & is %26 I am not why you have that extra "amp" in there, may be that is causing the issue ?
... View more
02-23-2015
01:31 PM
1 Kudo
Hi CoS You can check the sessions from CLI using the below command: show session all filter nat-rule <rule-name> To see what NAT rules are matched for a specific traffic you can also use the test command: test nat-policy-match <criteria>
... View more
02-20-2015
10:45 PM
Dataplane can be down in some situations that is the reason there is a segregation between dataplane and management plane so even during high traffic you can easily access the device through management plane. You can disable services under management-profile applied to that interface to restrict access ( or not use a management-profile at all)
... View more
02-19-2015
12:24 PM
Hi dannon You will have to allow SSL on service TCP-636 to make this work. Firewall will not be able to identify it as LDAP unless you enable decryption.
... View more
02-13-2015
04:15 PM
I could not find any documentation specific to "Maximum number of interfaces" but there is a document on how to check system limits: What is the Command to Display System Limits?
... View more
02-13-2015
02:01 PM
1 Kudo
Hi @mike_cc I think this is a hardware (+software) limitation, you can find the limit using the below command: show system state | match max-qosif cfg.general.max-qosif: 6 **EDIT: The above output is from 3050 so you can have 6 max qos interfaces on your device. Hope it helps !
... View more
02-13-2015
01:19 PM
2 Kudos
mbeghdadi There is no need to define all the IPs on the public Interface, if they are all of the same network then just create NAT rules using and device will automatically respond to ARP for these IPs You will have to create NAT rule if you want to 1-1 mapping between the LAN networks and public IPs I don't think there is any need of virtual routers on LAN side as long as all the networks are different. Hope it helps!
... View more
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
