About LCMember1643

I've installed Ansible on Ubuntu. playbooks referencing panos modules do not work. They fail with the message "ERROR! no action detected in task". Here's an example:   ---   - name: My First Test     connection: local     gather_facts: False     hosts: localhost      tasks:      - name: check if ready        panos_check:           ip_address: "10.0.0.99"           password: "admin"   I run the playbook with "ansible-playbook test.yml --check"   If I replace 'panos_check' with a known native Ansible module, it get's past the point. All of the doc I've read says the panos modules are included with the Ansible distribution, but I can't find a way to check that.   I'm stuck, and any help is appreciated! ... View more

The Knowledge article on blocking TOR, https://live.paloaltonetworks.com/t5/Featured-Articles/How-to-Block-Tor-The-Onion-Router/ta-p/177648, references a list on panwdbl.appspot.com. This website has a number of lists that can be used to filter traffic, including the list of TOR exit nodes.    What process is used to ensure these lists are accurate? It would be a major problem if, for example, 8.8.8.8 got added to the TOR list by accident or ill intent.   The TOR list is https://panwdbl.appspot.com/lists/ettor.txt    ... View more

We have a rule allowing VPN traffic (IPSec) from our Guest environment. This traffic is non-decryptable. We would like to reduce CPU by disabling Server Response Inspection for this traffic? Do we lose anything from a security perspective if we do so? If there is a change in the application, will app-id still detect it? ... View more