This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About nicford
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About nicford
10-03-2022
17Posts
2Likes
0Solutions
Oct 03, 2022Last Visited
User
Activity
User
Profile
Latest posts by nicford
| Subject | Views | Posted |
|---|---|---|
| 1424 | 01-11-2018 11:35 AM | |
| 887 | 01-11-2018 08:21 AM | |
| 1438 | 01-11-2018 08:20 AM | |
| 2670 | 01-05-2018 03:44 PM | |
| 1863 | 01-05-2018 03:42 PM | |
| 4607 | 01-05-2018 03:36 PM | |
| 4825 | 01-03-2018 11:42 AM | |
| 5303 | 01-03-2018 11:26 AM | |
| 1490 | 08-31-2017 09:06 AM | |
| 1836 | 08-04-2017 04:54 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 01-03-2018 11:26 AM | |
| 1 Like | 01-05-2018 03:36 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 26 Likes |
Retired Member
|
by
Retired Member
|
User Badges
Community Statistics
| Member Since | 04-11-2017 12:48 PM |
| Date Last Visited | 10-03-2022 06:07 PM |
| Posts | 17 |
| Total Likes Received | 2 |
01-11-2018
11:35 AM
My SE told me PAN has no feature for this scenario and recommend a script to disable the gateway.
... View more
01-11-2018
08:21 AM
thanks for everyone feedback! I'll defintiely look into Firemon and also some scripts some of you have shared.
... View more
01-11-2018
08:20 AM
Hi, I am looking to explore options that in a situation when the External Edge may be "up" but, the internal resources have failed. For example, a core switch has crashed but, the firewalls and internet routers are still online. Users will connect to the gateway via GP but, no be able to access resources. What is a way to migrate users dynamically or stop advertising a gateway for a period to avoid new connections?
... View more
01-05-2018
03:44 PM
It also depends. If you allow SSL, anything is allowed. But, if you configure "app-default" then it's only 443. If you try to access https://google.com:4443, this would not be allowed. You'd have to change from "app-default" to any.
... View more
01-05-2018
03:42 PM
Speak with your outlook team. Our outlook is available without GP, along with Skype.
... View more
01-05-2018
03:36 PM
1 Kudo
thanks for the script! but reviewing it (forgive me if I'm wrong), this just prints all the unused rules. My main goals would be to print the rules, then tag them. My next step would be locate this tag, disable rules. Finally, delete all disabled rules.
... View more
01-03-2018
11:42 AM
Unfortunately we have over 100 firewalls and probably 100s if not over 1000 unused rules. So something automated would be extremely helpful.
... View more
01-03-2018
11:26 AM
1 Kudo
How to tag all unused security policies. I'm faimilar with the "highlight unused" and > show running rule-use rule-base security type unused vsys vsys1 command. Is there a way I can then easily tag all my rules used say older than 90 days?
... View more
08-31-2017
09:06 AM
Is there a tool out there to perform multiple rule edits? OR am I forced to do a "find & replace" method by copying CLI? In this case, I'm trying to enable log session at end for all rules.
... View more
08-04-2017
04:54 PM
Hi, We have roughly 30-40 VPN tunnels built to AWS from on-prem, each being used by a different business unit for development. What happens though, is during their process they are forced to blow away their EC2 instance and create a new one. AWS then assigns new public IPs to them. Is there any way for us to pull that information in and have our PANs update dynamically for the IPsec peer address? Right now we manually update them which is very time consuimg. The only thing I've thought of but haven't explore too much assigning each vpn tunnel a DNS record and having an external vendor or AWS provide the updated IP, using FQDN on our PANs.
... View more
06-08-2017
01:18 PM
this article looks promising: https://popravak.wordpress.com/2014/08/27/palo-alto-ngfw-use-case-one-monitoring-traffic-tap-mode/ It's unfortunate now i cant identify zones too easily. But I can make intelligent guesses based on source/dest ips.
... View more
06-08-2017
01:12 PM
Hi There, At one of our sites we fell vicitim and have the dreaded any any security policy in place. We are trying to determine the best course of action to lock it down. Would I create tap firewall ports and span all the traffic, then create new rules based on it in tap zones? Any guides out them to assist for this specific situation?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-03-2022
06:07 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks