About crypto

Hi, I would like to know if IKEv2 phase ia compromise because of weak encryption in proposal,  malicious user  can access to all data sent across the VPN connection, which may include passwords and sensitive file ?   Or Malicious user only know phase 1 proposal and it cannot be impact phase 2 if we are suing strong encryption on phase 2 ?  ... View more

i am confuse AWS network firewall and peering section. As per AWS documents, it said **AWS Network Firewall cannot be deployed to inspect traffic between VPCs that are peered together; ** this mean AWS network firewall cannot support.   So let me know paloalto can support below scenario ?   i did vpc peering VPC 1 (10.1.1.0/16)and VPC2 ( 10.2.1.0/16). VPC 1 have one private subnet ( 10.1.2.0/24) behind the PA firewall VPC 2 have one private subnet ( 10.2.2.0/24) behind  the PA firewall I have the one private route table destination 10.2.2.0/24 next hop is firewall interface in VPC 2. I add one route to go 10.2.2.0/24 next hop is peer ID in VPC one private route. I have the one private route table destination 10.1.2.0/24 next hop is firewall interface in VPC 1. I add one route to go 10.1.2.0/24 next hop is peer ID in VPC 2. let me know this traffic will pass firewall ? can we use PA firewall to inspect traffic of private network(10.1.2.0/24 and 10.2.2.0/24) of  two vpc which it is peering?   I don't want to use transit gateway. ... View more

Hi, I would like to do url white listing. before i do white listing , i would like to monitor all url of users and office application. after that i would like to allow specific url only. In paloalto monitoring is only show destination ip address and never show the url. I would like to know can i mornitor the user access url and application access url on paloalto firewall ? eg. if i want to know all services url of onemap.com or map.me ,how to monitor on paloalto ?   ... View more

Hi, I have the experience how to upgrade PAN os with ON-PRIMES .But I don't know how different on AWS and what is impact.I would like to upgrade my PA on AWS. my pan-os is 8.1.So It is very old . I would like to upgrade latest version. So let me know what is the best practice to upgrade PA on AWS. How much downtime i need to upgrade ? I noticed in doc as below : So if i will upgrate 8.1 to 9.1.3 ( 8.1=>9.0=>9.1=>9.1.1=>9.1.2=>9.1.3)   total downtime is 3 x 5= 15 hours ? 2-3 hours to upgrade a slower or older system, depending on config. Multiply if upgrading across multiple versions.     ... View more