Paloalto SNMPv3 PRTG
Auth Password對應PRTG的Password Priv Password對應PRTG的Encryption Key OID & Option & Mask 文章底部再自行了解 需要改為SHA和AES MGMT的interface需要增加SNMP Reference htt...
Paloalto disable MGMT CBC ciphers & TLS 1.1
首先建立一個SSL/TLS Service Profile, 選擇Certificate, Self-sign或trusted certificate並便用最低TLSv1.2 預設只有2個設定 # show shared ssl-tls-service-profile AAAAAA protocol...
Paloalto export address and address group
在Paloalto要將舊的Policy搬到另一台機, 最煩的不是Policy太多, 肯定是Object太多, Policy可能好多, 但Object肯定更多 所以使用Cli export & import address & address group便可以更快地設定Policy, ...
Paloalto can not delete Certificates
configure delete shared certificate [your certificate name]
Paloalto on Alicloud interface down
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPD3CAO Reboot not work https://knowledgebase.paloaltonetworks.com/KCSArticl...
PA-VM console設定MGT IP
admin@fw> show interface management admin@fw# set deviceconfig system type static admin@fw# set deviceconfig system ip-address netmask default-gateway...
Paloalto 錯誤地提早按了Install
在一次升級準備的情怳下, 不小心提早按了Install, 而且在Install過程中找不到取消 比對一下沒有按Install的Active 不小心按了Install的Passive Reference https://knowledgebase.paloaltonetworks.com/KCSArt...
Paloalto Preview Changes Lines of Context
預設是前後10句, 即是會提出修改的設定, 還會顯示修改的設定上下各10句
Paloalto HA Firewall PanOS 8.1.x upgrade to 9.1.x
升級版本: 8.1.15-h3 -> 9.1.14-h1 預先下載: 8.1.24, 9.0.0, 9.0.16-h3, 9.1.0, 9.1.14-h1 安裝次序: 8.1.24 -> 9.0.16-h3 -> 9.1.14-h1 假設PA1是Active, PA2是Passiv...
Paloalto Firewall NAT 基本設定
由初始化到用戶可以上網, 最基本的設定, 沒有包含Security的部份