not able to disable packet-capture for DNS security from panorama 10 to firewall 9.1

cancel
Showing results for 
Search instead for 
Did you mean: 
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

not able to disable packet-capture for DNS security from panorama 10 to firewall 9.1

L3 Networker

Panorama is running on 10.0.5 and Firewalls running on 9.1.7

We want to disable packet-capture for DNS security license from Panorama , but there is no option in Panorama for DNS security as multiple categories replaced this option in 10.0

 

Panorama 10.0.5

Deepak25_0-1625631897133.png

 

Firewall 9.1.7

Deepak25_0-1625632270687.png

 

 

 

can we disable pcap for all new categories showing in DNS-Security in Panorama and push the changes ? Will it work ?

We want to disable pcap for palo alto networks DNS security signature showing in firewall.

 

1 ACCEPTED SOLUTION

Accepted Solutions

L3 Networker

Why it shouldn't work? You just disable the "single-packet" capture for the categories on the correct profile under the correct device group in Panorama and commit and push the config to the firewalls:

 

 

 

 

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/objects/objects-security-pro...

View solution in original post

2 REPLIES 2

L3 Networker

Why it shouldn't work? You just disable the "single-packet" capture for the categories on the correct profile under the correct device group in Panorama and commit and push the config to the firewalls:

 

 

 

 

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/objects/objects-security-pro...

View solution in original post

L3 Networker

You may also check the free trainning for Panorama edu-120 (free registration to Palo Alto beacon is needed https://beacon.paloaltonetworks.com/student/catalog

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!