Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About tostern
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About tostern
04-13-2022
38Posts
6Likes
7Solutions
Apr 13, 2022Last Visited
User
Activity
User
Profile
Latest posts by tostern
| Subject | Views | Posted |
|---|---|---|
| 930 | 11-24-2021 10:38 PM | |
| 1164 | 09-21-2021 11:56 PM | |
| 2301 | 07-20-2021 12:17 AM | |
| 2307 | 07-20-2021 12:13 AM | |
| 2333 | 07-19-2021 11:43 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 06-23-2021 12:35 AM | |
| 2 Likes | 11-24-2021 10:38 PM | |
| 1 Like | 07-20-2021 12:17 AM | |
| 1 Like | 09-10-2020 12:00 AM | |
| 1 Like | 04-12-2021 08:04 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes | |||
| 12 Likes |
User Badges
Community Statistics
| Member Since | 08-01-2017 04:14 AM |
| Date Last Visited | 04-13-2022 02:03 PM |
| Posts | 38 |
| Total Likes Received | 6 |
11-24-2021
10:38 PM
2 Kudos
Hi @SampleWu-TDK i am seeing that issues in the past really often. In 90% all the cases is the reason the Password. Please redeploy the Firewall and use a Password only with with upper/lower cases and numbers for example PaloAdmin12345 I hope it will help you. Regards, Torsten
... View more
09-21-2021
11:56 PM
Hi @sameer.ahmad here are the official document from Palo Alto about the configuration of native HA https://docs.paloaltonetworks.com/vm-series/10-1/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/configure-activepassive-ha-for-vm-series-firewall-on-azure.html We tested it already several times and it is working but you have to know that failover time is around 3 - 10 minutes because of the API calls on the Azure side. We can't speed up that process. Our recommendation is always to use Azure Load Balancers, then you get better SLA's and higher resilience. Regards, Torsten
... View more
07-20-2021
12:17 AM
1 Kudo
@abhishah03 please send me a email tostern@paloaltonetworks.com then i want to have a deeper look into it. Afterwards we can share here the solution of the problem. Regards, Torsten
... View more
07-20-2021
12:13 AM
@abhishah03 so you can see that the packet is leaving the PAN FW but you didn't get any return traffic? Did you checked the AWS route tables and are you sure you haven't any SG on the Server that can block the traffic? Regards, Torsten
... View more
07-19-2021
11:43 PM
Hi @abhishah03, sorry to hear that had no luck with our TAC team. Your problem that you subscribes could have many reasons. - Did you checked your Security Groups on all interfaces? - Did you reviewed all route tables that the traffic get's forwarded correctly? - Did you already asked AWS TAC if they can see the packets and could they explain you the reason why the packets didn't received the client host? Regards, Torsten
... View more
06-23-2021
12:35 AM
1 Kudo
Hi @US_SOC_Analyst, you can find the the reference architecture here. PANW does not recommend native HA in because of the long failover time as @raji_toor already described. With LB sandwich you have better resilience. Regards, Torsten
... View more
06-21-2021
11:13 PM
Good morning @raji_toor and @JimMcGrady The Azure Marketplace offering has limited features and you can't deploy two firewalls over the marketplace in a single Ressource Group. That why we are using Terraform templates or ARM templates. Below are the link to the ARM Templates with the examples how to use it. ARM Templates: https://github.com/wwce/azure-arm Terraform provider: https://registry.terraform.io/modules/PaloAltoNetworks/vmseries-modules/azurerm/latest How to setup HA in Azure: https://docs.paloaltonetworks.com/vm-series/10-0/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/configure-activepassive-ha-for-vm-series-firewall-on-azure.html i hope i could help you. Regards, Torsten
... View more
04-12-2021
08:04 PM
1 Kudo
@Tariq87 see below on the picture. You have to make sure that on the interface on the firewall are you not select "Automatically create default route....."
... View more
02-28-2021
11:13 PM
@iam_2021 Yes, you have to do may more configurations on the AWS side to make traffic flowing. Please follow those guides: https://docs.paloaltonetworks.com/vm-series/10-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/deploy-the-vm-series-firewall-on-aws/launch-the-vm-series-firewall-on-aws.html https://docs.paloaltonetworks.com/vm-series/10-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws.html
... View more
02-05-2021
04:37 AM
Hi @Sandeep_Darak that in depends how you setup your interfaces. when you have only one interface then is of course your traffic recognized als interzone fraffic to Outside -> Outside. when you want to split it then you have to create sub interfaces and map them to a another zone and adopt your FW VR routing.
... View more
11-19-2020
03:14 AM
Hi @MPalagiri , the result what you get is expected because you didn't finished the query, i get the same result because there no real output expected here. Event queries are used to search and audit all the console and API access events in the cloud environment. Try event where commands like below. event where cloud.type = 'azure' I hope that helped you? Regards, Torsten
... View more
09-29-2020
03:39 AM
Hi @Welborn i dont' understand the question. could you please explain what are you trying to do? Regards, Torsten
... View more
09-25-2020
01:59 AM
Hi @ramyfrahman i can tell you that we planning to implement the support of OCI in PCE, but i can't tell you when it is coming. The best is when you speak with your SE/AM to get more information about it. The status already updated to "Planned" https://prismacloud.ideas.aha.io/ideas/PANW-I-190 Regards, Torsten
... View more
09-25-2020
01:53 AM
Hi @ramyfrahman did you already checked out that page ? https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-administrators/define-prisma-cloud-enterprise-settings.html#id5326b191-bf23-4545-bc05-620d113bf54d I think it describes it pretty well. Please let me know if it dosen't answered your question. Regards, Torsten
... View more
09-25-2020
01:45 AM
Hi @ramyfrahman You can run the RQL to find all "Internet exposed instances" where talking with Suspicious IPs. NETWORK WHERE src.publicnetwork IN ('Suspicious IPs','Internet IPs') AND dest.resource IN ( resource where role not in ( 'AWS NAT Gateway' , 'AWS ELB' ) ) and protocol not in ( 'ICMP' , 'ICMP6' ) The problem is that Auto-remediation is not supported for Network and audit policies only for config policies. But maybe you can do something like this. RQL config where cloud.type = 'aws' AND api.name='aws-ec2-describe-images' AND json.rule='image.public is true' Remediation: aws ec2 --region ${region} modify-image-attribute --image-id ${resourceId} --launch-permission "{\"Remove\": [{\"Group\":\"all\"}]}" I hope i could help you a bit with that Regards, Torsten
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-13-2022
02:03 PM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks
