This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
Hi, i think the employees use the "Tor Tabs" Feature. see https://brave.com/privacy-features/ So your approach should not to "Block Brave" but Block Tor connections. Greetings
... View more
Hi,
int the Policies Tab you have Columns for Created and Modified (far right)
thats the simplest way to see it for existing rules.
Greetings
... View more
Hi Pavel,
thanks for your approach.
i have access and know how to do it by hand, but doing this for > 25 devices (different dns names in the certificate) is a matter of time.
generating the config for the cli in an editor and pushing it is way faster.
i also found the option for "set template" but you have to set the otherwise generated options by hand e.g. private and public key
so this won't work for me
Greetings
... View more
Hi Josh, in your security policies you can add the url category as matching criteria under "Service / URL Category" so you can build 2 security policies the first with your custom URL "Vendor List" and the second one without the URL Category match. On both you can apply the URL Filtering Profile that is needed. Greetings
... View more
Hi,
if you are familiar with Ansible you could try the official paloaltonetworks panos collection at ansible galaxy.
https://galaxy.ansible.com/paloaltonetworks/panos
there is a module called panos_software that is meant for managing software versions.
Greetings
... View more
Hi everyone,
i know that i can generate certificates on the panorama itself with the command:
request certificate generate ca no signed-by myCA digest sha512 days-till-expiry 365 countrycode DE organization "My Org" hostname [ hostname hostname.mydomain ] name hostname.mydomain certificate-name myCert algorithm RSA rsa-nbits 4096
but as this is done in operational mode on the panorama, there is no way to select a template where the certificates should be generated.
We have to change our RootCA and so i have to generate new certificates for all our palos.
with cli this would be done in seconds
Thanks for your help
Panorama
... View more