About nsrini1991

Hi Experts I'm looking for an assistance where ms-update is being recognized as ssl and getting denied. We've allowed the web-browsing and ssl to allow the dependency applications as well on the same rule. Port is being identified as TCP/8531 but the application is marked as ssl. Firewalls are running 9.1.6 Any suggestions please. Thanks in advance. ... View more

Hi Experts,   We've a pair of firewalls (9.1.6) managed by the Panorama (9.1.6). We've Threat prevention license in place and client would like to install just the threats and not the apps by selecting   disable the new apps in content update. As recommended by the TAC, we've downloaded the latest version and when installing the new version, we select the disable new apps in content update on the firewalls. Then, similar procedure followed on the Panorama.  Once done, Panorama doesn't allow us to commit any changes to the firewalls prompting us with an error message that apps need to be enabled on the firewalls. We need to run the below commands to install the changes.   request set-application-status-recursive status enabled application (name) status enabled   We've shared TSF with the TAC. Am I missing something? Can someone please assist or correct me if I'm wrong. Thanks in advance. ... View more

Hi Experts, We've a pair of firewalls (9.1.6) managed by the Panorama (9.1.6). We've Threat prevention license in place and client would like to install just the threats and not the apps by selecting disable the new apps in content update.   As recommended by the TAC, we've downloaded the latest version and when installing the new version, we select the disable new apps in content update on the firewalls. Then, similar procedure followed on the Panorama.    Once done, Panorama doesn't allow us to commit any changes to the firewalls prompting us with an error message that apps need to be enabled on the firewalls. We need to run the below commands to install the changes.   request set-application-status-recursive status enabled application (name) status enabled   We've shared TSF with the TAC. Am I missing something? Can someone please assist or correct me if I'm wrong. Thanks in advance. ... View more

Hi Experts, We've configured a Vulnerability profile with the Action of Default. For the Windows Print night mare vulnerability (Version ID: 8424, signature ID:91333) and the CVE ID: CVE-2021-1675 I see the default action is marked as 'Alert' which will allow the traffic. I am trying to change the action of an specific Vulnerability signature from Alert to Block. When I go to the profile and find the signature in the Exceptions and change it to Block. If I click on enable and Click OK, this specific one is showing under the 'exceptions' tab as expected.  Will it be exempted from the traffic processing? Am I missing something?  How do I change the default behavior of only this signature to be reset ? Thanks in advance 91333 Windows Print Spooler Remote Code Execution Vulnerability CVE-2021-1675 code-execution alert 7.1.0 ... View more

Hi Experts The client is reporting Latency/Jitter when making the phone calls which is traversing through the PA firewalls 5220. We've QOS policy configured for the RTP/SIP applications (User/Zone is set to 'any') with Class 1(real-time) . Also, we've configured a Guaranteed Egress of 5000Mbps for this Class1 traffic under QOS profile which is applied on the Egress Interface to ensure this is classified on high priority which is reflecting when checking under statistics as well. Can someone please assist what to check and how to proceed to take it up further. Thanks in advance.     ... View more