General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

User ID mapping from Exchange logs behind F5 loadbalancer

Hi , 

 

We are currently trying to solve an issue with User ID mapping on Exchange cluster. 

This cluster is sitting behind F5 WAF, and it is doing SNAT, therefore all request are coming from same IP. (IP of the WAF)

This causes the User-IP binding t

...

aber by L0 Member
  • 895 Views
  • 3 replies
  • 0 Likes

Resolved! prismacloud miss home region for oracle cloud

Hello, I'm trying to configure a Oracle Cloud Account in prismacloud. And I notice, the "Home Region" in "Edit Tenant Details" does not contains some regions, well at least eu-paris-1.

 

Since it's not available, I'm not able to successfully finish t

...

Excessively long useragent

I don't think the following bot useragent is acceptable:

 

Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from

...

chaeron by L0 Member
  • 1544 Views
  • 2 replies
  • 0 Likes

Block scanning from shodan

Hello,

 

Anyone have successfully block scanning from shodan.io?   www.shodan.io  ?

 

It looks like Checkpoint has written specific signature to block shodan scanning,  http://blog.checkpoint.com/2016/01/04/check-point-threat-alert-shodan/

 

-E

Best config to speed up HA failover

During the last PAN OS upgrade we had to failover between two firewalls in HA configuration. The failover time takes unusually amount of time during which the Internet access was unavailable. It took approximately 10-15 lost pings (to internet host)

...

Resolved! What cloud services are affected by CVE-2020-1982?

Dear Team,

 

When checking CVE-2020-1982 in Palo Alto Networks Security Advisories, we found the following text:

> These cloud services include Cortex Data Lake, the Customer Support Portal, and the Prisma Access infrastructure.
URL : https://security

...

Resolved! capturing ssl decrypted traffic

Hello group,

as I'm thinking that someone is doing nasty things in the SSL-traffic, I thought of decrypting the ssl, capture the decrypted packets and put the into wireshark to look at it.

Only I could not find a way of explicit tell the PA to capture

...

Resolved! Panorama plugin log(AWS&K8S) delay

Dear Team,

 

I linked Panorama to the VM firewall.

Of course, the Timezone was set the same for both devices. (asia/seoul)

 

However, if I check the plugin log (AWS&K8S) in real time on Panorama, I will only see logs from about 4 hours earlier than t

...

Millennium (mp)# について

はじめまして。

 

勉強用にpa820を購入しました

 

Millennium (mp)# と出てきたのですが、イメージの破損でしょうか?

 

どなたか解決方法を教えていただきたいです。

 

よろしくお願いします。

  • 24276 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors
Labels