Posted inPalo Alto
Paloalto Chrome 124 show ERR_SSL_KEY_USAGE_INCOMPATIBLE
Chrome 124 show ERR_SSL_KEY_USAGE_INCOMPATIBLE, 用regedit和shortcut的方法bypass檢查的方法已經不行了 用Powershell生成新的self sign cert, 然後export & import到PA New-SelfS...
Posted inPalo Alto
Paloalto External Dynamic Lists with Certificate Profile and Client Authentication
首先當然要建立一個URL, 沒有HTML純文字 然後到Certificate裏Import上面網址的root certificate和intermediate certificate然後當然要Import上面domain的certificate 接著建立一個Certificate Profile 我...
Paloalto在Address Group domain中尋找相對的IP
有沒有試過用戶反映某個網站去不到, 然後查到原來被PA deny了, 找到Policy, 找到一大堆address group, 但是全部domain, 都不知道是因為那一個domain resolve到相同的ip 可以使用這個command, 列出全部domain cached IP show d...
Paloalto SNMPv3 PRTG
Auth Password對應PRTG的Password Priv Password對應PRTG的Encryption Key OID & Option & Mask 文章底部再自行了解 需要改為SHA和AES MGMT的interface需要增加SNMP Reference htt...
Paloalto disable MGMT CBC ciphers & TLS 1.1
首先建立一個SSL/TLS Service Profile, 選擇Certificate, Self-sign或trusted certificate並便用最低TLSv1.2 預設只有2個設定 # show shared ssl-tls-service-profile AAAAAA protocol...
Paloalto export address and address group
在Paloalto要將舊的Policy搬到另一台機, 最煩的不是Policy太多, 肯定是Object太多, Policy可能好多, 但Object肯定更多 所以使用Cli export & import address & address group便可以更快地設定Policy, ...
Paloalto can not delete Certificates
configure delete shared certificate [your certificate name]
Paloalto on Alicloud interface down
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPD3CAO Reboot not work https://knowledgebase.paloaltonetworks.com/KCSArticl...
PA-VM console設定MGT IP
admin@fw> show interface management admin@fw# set deviceconfig system type static admin@fw# set deviceconfig system ip-address netmask default-gateway...
Paloalto 錯誤地提早按了Install
在一次升級準備的情怳下, 不小心提早按了Install, 而且在Install過程中找不到取消 比對一下沒有按Install的Active 不小心按了Install的Passive Reference https://knowledgebase.paloaltonetworks.com/KCSArt...