The ipsec-tunnel comes up only when there is interesting traffic destined to the tunnel or when the tunnel manually initiated.
That leads to problems in our monitoring. I'd like to ask if there is a workaround to make the VPN always-up without need t
Hi all,
I Use Global Protect version 4.13 on a PA 820 Os 10.0, after updating my Mac to Big Sur i vant connect to the Palo anymore.
The strange thing: when i use the same Mac to connect to another Palo in our domein it works.
The error: failed to get
...
Can we create a profile in the Palo Alto firewall to link up with an AD account and limit bandwidth to each user?
Hi everyone,
If you haven’t already seen, registration is now open for our first interactive event all about the Best Practice Assessment (BPA) tool!
You will be able to connect with subject matter experts, share best practices, and learn how this
...
Hello,
We have a pair of 5250 running PANOS 8.1 with 125 vsys. We want to deploy EDL to block well known attackers. My understand is the EDL has a limit of 150000 entries for IP list.
If I create a shared EDL (type IP list) with 10 entieres and cre
...
Hi All,
I have a user who connects via a thin client with GP to our network. Actually we have around 50 users, but this one user has many problems. She gets disconnected multiple times a day. She tried multiple connections: her current residence with
...
Anyone know what is latest OS should be install on PA-3020?
Currently, we can download the PAN-OS Software Image of the PA-200, 800 and 3200 series from CSP.
Does it work even if I install different models of PAN-OS?
For example, the case of upgrading by installing PAN-OS 7.0.1 downloaded from PA-200 to PA-305
...
Hello,
I have PaloAlto on GNS3 i set a policy from inside to outside and i also do the NAT policy Plus the virtual router configuration.
from inside i can ping to internet but i cannot browse, is that related to licence or i miss something?
Thanks.
I'm having an issue where my Decryption policy is breaking my Palo Alto Dynamic Updates. When I turn on decryption, and then attempt to download an Antivirus, Applications and Threats, or Wildfire update, I'm given the message "Invalid content image
...
Hello,
How to configure the PA firewall to return a SMTP 541 when vulnerability is seen in a SMTP flow ? I have managed to do it with the AV protection but not with the vulnerability protection.
Cedric
Global Protect, running 5.0.8 w/ Mac 10.8.5.
Client connects and works fine initially.
At intermittent times, a few times a day, the client has to manually Resubmit Host Profile for the HIP rules to re-engage and restore traffic flow.
This is obviously
...
Good afternoon,
we've noticed a strange issue on a client firewall that injests URL IoCs from our Minemeld instance into an outbound block policy.
Specifically it seems that the Firewall Minemeld Policy is blocking outgoing URLs connections that are
...
Hi,
We have GP configured with 0.0.0.0/0 inside tunnel. We would like to split-tunneling for microsoft updates. In the split tunneling profile we add several microsoft URLs in order to avoid but its not working.
We added this URLS:
*.update.microsoft.c
...
For TCP flood logs should only show "random-drop" with RED configured.
"drop" for TCP flood is this coming from options set under "TCP Drop" options under Packet Based Attack Protection.
TomYoung
on:
Can you have an interface with an SFP in receive only mode?
reaper
on:
VM-50 discontinued?
