Saturday, April 20, 2019

Palo Alto Networks - How to Safely Enable Applications - Part II

›
My previous post details the problems associated with a legacy layer 4-based security policy approach, and how organizations can move to a ...
Wednesday, March 7, 2018

Palo Alto Networks - How to Safely Enable Applications - Part I

›
In the field, I tend to run into the following security policy scenario quite often because administrators either just migrated away from a ...
1 comment:

Palo Alto Networks - Querying Multiple URL Categories at Once

›
Palo Alto Networks offers a way to query a URL via https://urlfiltering.paloaltonetworks.com/. However, if you want to query multiple URLs a...
Monday, July 31, 2017

Palo Alto Networks - Tags, Dynamic Address Objects, and Policy Automation

›
Palo Alto Networks offers a variety of ways to automate configuration tasks. One of these ways is through the concept of tags. Tags allow a...
Wednesday, July 19, 2017

Palo Alto Networks - Bing Safe Search Options

›
Safe Search  allows administrators to block explicit content. This especially important in educational institutions (i.e. K-12). Palo Alto N...
Wednesday, March 22, 2017

Palo Alto Networks - Clientless VPN and RDP

›
With the 8.0 release of the PAN-OS operating system, the ability to access applications via web portal has now been added. This is sometimes...
Wednesday, March 8, 2017

Palo Alto Networks - How to Import Address Objects from a .csv File

›
Although there are a variety of ways to accomplish this task, I thought I would put together a quick script to satisfy this particular requi...
1 comment:
Thursday, January 26, 2017

Palo Alto Networks - Application Prioritization

›
In many customer environments, administrators may not have the approval from management to block specific applications that are considered t...
Wednesday, December 7, 2016

Palo Alto Networks - Google Authenticator and OpenOTP

›
I have been asked about how multi-factor authentication (MFA) with with Palo Alto Networks and GlobalProtect, so I thought I would put this ...
1 comment:
Tuesday, December 6, 2016

Palo Alto Networks - NAT Issue

›
I ran into a NAT situation recently that I thought I would share. Here is the scenario: Firewall Untrust IP: 1.1.1.1/24 Firewall Trust IP...
Thursday, December 1, 2016

Palo Alto Networks - Ruckus User-ID Integration

›
Palo Alto Networks firewalls are built on three core technologies:  App-ID ,  User-ID , and  Content-ID . User-ID specifically, accomplishes...
Wednesday, November 23, 2016

Palo Alto Networks - Google Safe Search Options

›
Safe Search  allows administrators to block explicit content. This especially important in educational institutions (i.e. K-12). Palo Alto N...
Tuesday, November 15, 2016

Palo Alto Networks - Aruba Networks Instant User-ID Integration

›
Palo Alto Networks firewalls are built on three core technologies: App-ID , User-ID , and Content-ID . User-ID specifically, accomplishes tw...

Asymmetric Routing with Juniper Routed VLAN Interfaces

›
I ran into a scenario the other day which I thought would be worth sharing. The customer had a layer 2 trunk link between the SRX firewall a...

Stand-alone vs. Integrated URL Filtering

›
In the field, I hear a lot of administrators talk about how they prefer to use a point-product for URL filtering rather than collapse that s...
Monday, October 12, 2015

Junos Space Security Director - Part IV

›
The fourth part of this guide demonstrates how to configure SRX logging in Junos Space Security Director (version 14.1R3.4). It assumes th...