Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- 5G/IoT
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma Access Insights
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About mcjyrnn
About mcjyrnn
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
04-11-2018
7Posts
0Likes
0Solutions
Apr 11, 2018Last Visited
User
Activity
User
Profile
Latest posts by mcjyrnn
| Subject | Views | Posted |
|---|---|---|
| 271 | 02-02-2018 10:56 PM | |
| 1233 | 02-02-2018 02:55 PM | |
| 1246 | 02-01-2018 10:31 PM | |
| 1247 | 02-01-2018 10:26 PM | |
| 1248 | 02-01-2018 10:25 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 |
User Badges
Public Statistics
| Date Registered | 01-31-2018 04:03 PM |
| Date Last Visited | 04-11-2018 03:51 AM |
| Total Messages Posted | 7 |
02-02-2018
10:56 PM
@brian, yes this is what you have mentioned above. Somehow this is a production firewall. Will have to secure approval on this one. But I really am consideting this suggestion. Will let you know oncw I have a feedback
... View more
02-02-2018
02:55 PM
There are policies that are being allowed going to the samw subnet of the DMZ network but those were servces that were allowed. This one still not working. 😞
... View more
02-01-2018
10:31 PM
What confuses me a lot is the following: 1. I believe the first rule should be fine, as Palo Alto is using stateful inspection. However, still I'm getting RTO. 2. Based from the logs that I've gathered. From src IP to dst IP is being allowed, but still RTO. 😞 I tried to check if I will be able to see the echo reply, then I found these logs which falls to the deny any any & also: The logs shows that the traffic is interzoning. But it shouldnt be. 😞
... View more
02-01-2018
10:25 PM
Hi Reaper, those were the logs that I was able get. Attaching the screenshots of my security policies.
... View more
01-31-2018
05:20 PM
Hi Brian, actually I've tried to change the application to ANY. But still no good, it still falls on DENY ANY ANY rule. 😞
... View more
01-31-2018
04:21 PM
Source IP: x.x.172.230 Source Zone: int-fw Destination IP: x.x.20.50 Destination Zone: DMZ Requirements: SRC and DST IPs should be pinged bi-directionally. Scenario: - I've allowed the traffic using ICMP, ICMP-0, ICMP-8, PING bi-directionally but still unsuccessful - Upon checking the logs, I can see that from SRC ----> DST is allowed using the RULE that I just entered - Upon seeing the return traffic, it falls to the DENY ANY rule. - Also in the return traffic, the src zone is int-fw and the dst zone is int-fw also **My rule is above the DENY ANY rule. Please help 😞
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
