This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About michelle79
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About michelle79
11-10-2022
8Posts
1Like
0Solutions
Nov 10, 2022Last Visited
User
Activity
User
Profile
Latest posts by michelle79
| Subject | Views | Posted |
|---|---|---|
| 2803 | 12-08-2019 08:12 PM | |
| 2076 | 12-03-2018 02:26 PM | |
| 2082 | 12-03-2018 02:04 PM | |
| 2096 | 12-02-2018 10:03 PM | |
| 1281 | 07-01-2018 11:44 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 03-04-2018 08:14 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 3 Likes | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 11-20-2017 07:00 PM |
| Date Last Visited | 11-10-2022 10:25 PM |
| Posts | 8 |
| Total Likes Received | 1 |
12-08-2019
08:12 PM
Hello, can someone please tell me the best way to implement minemeld custom IP and URL blacklists? We have just built a minemeld server and have both a list of IPs and URLs. Currently have just one OUT rule like below but should we have 2 - 1 for IP destination and 1 for ANY destination but for particular URL category? We are unsure if the URL category will match only if the destination IP matches or if they are applied in an IP OR URL type situation.
... View more
12-03-2018
02:26 PM
Hmmm ok perhaps this is why the engineer implemented the HA in the current layout then. Given we already have the backup PAN at the remote site then it is probably not necessary to screw with the HA config - unless of course this is required in order for me to set up the redundant ISP?
... View more
12-03-2018
02:04 PM
Thanks for such a quick response! We do have an active/passive HA on the Primary PAN but I was told that for HA to work they need to be connected via a L2 connection so for us I don't think it's possible to have HA between primary and backup PAN's as we have a L3 WAN only. Please correct me if this is wrong and I will follow up with the engineer that implemented the HA. So we currently have 2 physical PANs in A/P HA at Primary site and 1 virtual PAN at backup site.
... View more
12-02-2018
10:03 PM
Hi, I have read a few articles regarding internet redundancy using a primary and backup ISP link on a single Palo but can someone please explain (if it's possible) how one might achieve redundancy using a primary ISP link on 1 Palo with failover to a backup ISP link on another Palo at a remote WAN site connected to the primary site via L3? Cheers, Michelle
... View more
07-01-2018
11:44 PM
Hi all, I'm hoping someone can help me avoid a huge overhaul and outage window of our DMZ network... Our DMZ gateway is currently a Palo interface with GlobalProtect enabled on it. Servers on the DMZ are at a remote site connected via a Layer 2 spanned VLAN. We intend to decommission this L2 link and move to a L3 VPN service. We have an entire public class C IP range to play with but I am a little stuck as to how to manage this transition as smoothly as possibly. Am I able to simply advertise a /32 route to the DMZ gateway address for GlobalProtect VPN traffic and another static route to forward the /24 range to a dummy subnet that directs any remaining DMZ traffic over the L3 service? If I could get away with this then I guess I will need to assign an IP in the DMZ range to the router servicing the DMZ servers and modify gateway IPs on all DMZ servers to point to the new IP assignment but is there anything fundamental I haven't considered or may have overlooked? I'm concerned that I will need to start from scratch and split the /24 subnet up which in turn I think will mean many more VLANs and changes on the infrastructure hosting the DMZ servers that I would preferably like to avoid. Appreciate any advice or wisdom you can offer. TIA
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks