Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About Alberto.Espinosa
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About Alberto.Espinosa
04-01-2020
4Posts
0Likes
0Solutions
Apr 01, 2020Last Visited
User
Activity
User
Profile
Latest posts by Alberto.Espinosa
| Subject | Views | Posted |
|---|---|---|
| 811 | 12-18-2019 03:17 AM | |
| 836 | 10-31-2019 12:12 AM | |
| 915 | 10-17-2019 04:42 AM | |
| 1094 | 04-24-2019 01:36 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 3 Likes | |||
| 2 Likes | |||
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 03-02-2017 12:16 AM |
| Date Last Visited | 04-01-2020 08:57 AM |
| Posts | 4 |
12-18-2019
11:16 AM
I believe that the first time someone submits their credentials, the bloom filter function (needs to confirm the user is passing non-domain credentials). After this is done, then the SSO (on the back end) is authenticating the user vs the firewall. So I think the answer i am saying (I believe) is NO, that the FW is only looking at the first auth request, not the SSO enabled sites, after the subsequent first one.
... View more
10-31-2019
12:12 AM
Hi @SteveCantwell , You're right all devices managed must have same master key. To do that we will have to factory reset our two Panorama in HA and our already managed HA firewall cluster to reset the master key and then be able to set a new master key and deploy it to all devices from Panorama following this link. https://docs.paloaltonetworks.com/panorama/9-0/panorama-admin/manage-firewalls/manage-the-master-key-from-panorama
... View more
04-24-2019
01:36 AM
Hi all, I have a doubt regarding the synchronization of BGP routes learnt by the active firewall. Reviewing the BGP route informationin in the active node with the following commands: > show routing protocol bgp loc-rib > show routing protocol bgp rib-out BGP seems is working fine in the active firewall, as the firewall has routes in his loc-rib table and advertise routes in his rib-out table. But reviewing the same BGP information in the passive firewall, nothing is shown in loc-rib table and rib-out table. As I can see HA A/P synchronizes the following runtime information: - Session Table - Neighbor discovery (ND) table - MAC table System runtime information synchronization: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/high-availability/reference-ha-synchronization/synchronization-of-system-runtime-information.html# But what about BGP routing information? This is the expected behavior? BGP routing information is not synchronized between HA active/passive? Should BGP routing information be synchronized between HA active/passive peers? Any help is really appreciated as I'm not sure what is expected. Thanks! Alberto
... View more
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks
