This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
We have just recently upgraded our firewalls from 3.1 to 4.1 Does anybody know what the ntlm URL is in 4.1? Old link: http://firewall:6080/esp/ntlm.esp New link: ??? Each time an admin user logs on remotely to someone’s machine or enters their admin credentials inside their current windows session, the firewall will continue to use those admin credentials rather than the original user’s credentials. A reboot of someone’s machine each time is likely the only fix. We had been using the shortcut as a workaround. Cheers
... View more
As the virtual wire is essentially connecting these two VLANs together, did you use crossover cables cables on one of the sides from PA to the switch? As fixing the port speed/duplex disables Auto-MDIX... I need to do this for a similar scenario, but I have a Cisco router one side and a Cisco ASA on the other. Without the isolate VLAN the ASAs fail to form a resilient pair as with the ASA directly cabled to the PAN the standby ASA has one of its interfaces link-down so the Secondary is shown as failed. So I will have:- ASA <---> Isolate VLAN <---> PAN Untrust <-> PAN Trust <-x-> Data Centre VLAN <---> Router This is so I can have the PAN in the traffic path performing web-filtering etc but use the ASA for L3 functions. I have valid reasons for this topology, testing the failover of both the ASA and PAN independantly should be interesting! Cheers
... View more
Hi, I see in the admin guide that it is possible to filter the default route so that it is not learnt by the OSPF process. Is there any way of applying a more granular filter so that I can restrict the Palo Alto OSPF process to only learn 10.0.0.0/8 routes? Similiar to an inbound Cisco distribute-list? Cheers
... View more
Hi, I've seached the data sheets and discussion forums but could not find any information on the size of the forwarding table for a PA-2020. We wish to run OSPF on this box and I need to understand the limitations related to the size of the OSPF database and number of link states we can store. Any pointers? Cheers
... View more