I would love to see an easy way to enable and disable ipsec tunnels and / or individual proxy ID's within the ipsec tunnel in order to force the tunnel to renegotiate via the GUI interface. Why does such a basic function not exist on the PA in the g
...
Hi,
Is it possible to configure log forwarding without logging to disk? and if logging to disk and the log partition becomes full will the logs still be forwarded?
Many thanks
Hello all,
since I'm just getting to grips with the support processes here apologies if I've missed a nice handy guide anywhere about this. My various questions don't seem to be covered in the Tech Notes though.
I'm installing some Palo Altos in to an
...
Just implemented a 3020 and have many Engineers looking to download EXE, ZIPs and ftp to sites all over the place. I am looking to allow them to use these services to certain URLs only. i have tried to create a custom URL list and File Transfer gro
...
Hi,
Created a Vulnerability Protection profile.
Noticed that I was seeing a lot of "Microsoft Windows Registry Read Attempt" entries in the threat log. These appear to be benign. So I edited the profile, clicked the exceptions tab and checked the "enab
...
Hi,
Can anyone please provide the steps to configure Address Objects of Type Dynamic.
Thanks
Hi All,
I just attempted to upgrade my existing pan os 4.1.2 to Pan 5.0.4. Everything went fine but my main link to router was down and so there is no internet access. I restarted the router and it was still no link. So i downgraded back to 4.1.2 and
...
Please let me know what the license situation is for Global Protect when using different PAN OS versions:
4.0
4.1
5.0
Do you I need a Global Protect license when using PAN OS version 4.0?
Do you I need a Global Protect license when using PAN OS version 4.
...
Hello,
on the cli show command I see under "XX Anti spyware" profile the botnet-domains policy but I'm not able to find it on GUI under object-securityprofiles -> antispyware.
Where botnet-domain behavior is configured on GUI ?
thank's .. here below the
...
I'm asking for folks on this discussion board to chime in with their experiences designing, implementing and supporting a larger (around 1,000 users) GlobalProtect VPN implementation.
What are your experiences deploying and maintaining the client? Did
...
Our students have decided it is fun to install the nCage Chrome extension which changes all images on a web page to a picture of Nicholas Cage. What is the best way to block a single URL from being accessed -- they are installing it via the Chrome W
...
How can I use Palo-Alto as reverse proxy. Suppose I have a DMZ zone that has all the web servers and I want the DMZ interface to act as reverse proxy.
The untrusted interface facing the internet would do the NAT translation. Then send the traffic to
...
We are a private high school with a growing laptop population but these kids work hard trying to circumvent our security. They have found using 3rd party VPN tools, mostly single exe's they hide in their recucle bin when they fear exposure. This to
...
Hi,
Could someone briefly describe the significance of these values shown in the output for "show sessions info" and how they may be tweaked from a performance perspective ?
-
Session accelerated aging: True
Accelerated aging thre
...
Does anyone know how can we get the App-Id name from an App-Id number? We can get statistics of the running App-ID cache ("show running application cache") but i can't find an easy way to map the App-Id number to the App-Id name.
Thanks,
Adriano Carval
...
PavelK
on:
Running SSH commands
TomYoung
on:
Expedition not importing NAT or security policies from PA-3020s running PAN-OS 9.1
crasmussen
on:
Fuel Spark Event Discussion: AI in the Age of Cybersecurity (May 23, 2024)
| Subject | Likes |
|---|---|
| 6 Likes | |
| 3 Likes | |
| 3 Likes | |
| 2 Likes | |
| 2 Likes |
