https://www.staffordnet.uk/ 2026-04-05T18:33:15+00:00 https://www.staffordnet.uk/ https://www.staffordnet.uk/lib/exe/fetch.php?media=favicon.ico text/html 2022-11-23T12:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:architecture&rev=1669207782&do=diff Palo Deployment Architecture Configuration strategy: Zones: * Untrust (for Internet links). * VPN (possibly use but only for third party - not VPN to other internal sites). * Trust (all interfaces that don't fit the others). * Guest (for guest networks that break out locally to the Internet and do not access any other site and are not accessible from any other site). text/html 2022-11-23T12:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:cli_commands&rev=1669207782&do=diff CLI Commands Set scripting mode to set a load of set commands set cli scripting-mode on set cli scripting-mode off text/html 2022-11-23T12:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:console_access&rev=1669207782&do=diff Console Access USB Console Access in Linux Palo Alto Networks documentation. Manufacturer of chip documentation. dmesg | grep ttyACM ls /dev/ttyACM* sudo ln -sf /dev/ttyACM0 /dev/ttyS3 sudo stty -F /dev/ttyS9 9600 sudo apt install minicom * Bits per sec - 9600 * Data bits - 8 text/html 2022-11-23T12:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:decoders&rev=1669207782&do=diff Incomplete List of PAN-OS Decoders I got this list by monitoring the Dynamic Update release emails from Palo Alto Networks. Remember a “decoder” is effectivly a “base protocol”. You can also detect these within the App-ID database as any application that does not have a text/html 2025-08-29T13:27:35+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:dns_security&rev=1756474055&do=diff Palo Alto Networks DNS Security DNS Security Documentation DNS Security Summary Page DNS Security Data Sheet DoT/DoH PAN-OS 11.2.1 released the ability for DNS Proxy on PAN-OS to act as a DoT/DoH server and also forward on DoT/DoH. Data Sources * Passive DNS * URL Filtering * WildFire * Honeynet * Cyber Threat Alliance * Unit 42 Details * Response in <100 Milliseconds text/html 2025-08-24T16:41:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:licencing&rev=1756053709&do=diff Palo Alto Networks Licencing VM Licencing There is a dedicated page to all things VM firewall. Lab Use PDF here. Old Model of VM Subscriptions * BND1 - TP * BND2 - TP, WF, DNS, URL, GP VM Credit SKU * PAN-SOFTWARE-NGFW-CR * PAN-SOFTWARE-NGFW-LAB * PAN-SOFTWARE-NGFW-NFR text/html 2022-11-23T12:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:licensing_vm&rev=1669207782&do=diff Palo Alto Networks VM Firewalls Cloning When cloning a lab VM firewall to use on another machine, edit the VMware VMX config file to use uuid.action = “keep”. When you boot the VM, click “I moved it”. VM Credit SKU * PAN-SOFTWARE-NGFW-CR text/html 2025-10-29T10:54:17+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:new_setup&rev=1761735257&do=diff New Setup Things to remember when setting up a new firewall. Set MGMT to DHCP configure set deviceconfig system type dhcp-client send-hostname no accept-dhcp-hostname no send-client-id no accept-dhcp-domain no Proxy URL Enable the firewall to return a clean block page even if the HTTPS session is not being decrypted (this requires the endpoint to trust the Forward Trust certificate on the firewall). Note that this only works for text/html 2022-11-23T12:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:products&rev=1669207782&do=diff Palo Alto Networks Products History * SecDo and LightCyber became Magnifer which then became Cortex XDR Pro * Cybera became TRAPS which became Cortex XDR Prevent * Redlock, Evident.io, Twistlock and Puresecbecame Prisma Cloud * Demisto became Cortex XSOAR text/html 2022-11-23T12:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:sku&rev=1669207782&do=diff Palo Alto Networks SKU Credits * PAN-SOFTWARE-NGFW-LAB Software NGFW Lab Credits * PAN-SOFTWARE-NGFW-NFR Software NGFW NFR Credits * PAN-SOFTWARE-NGFW-CR Software NGFW Credits (Production) * PAN-SOFTWARE-NGFW-SUB-CR Software NGFW Credits (Production) VM-xxx Renewal text/html 2022-11-23T12:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:soc&rev=1669207782&do=diff Palo Alto Networks SOC Tour of Palo Alto Networks internal SOC. text/html 2022-11-23T12:49:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=paloaltonetworks:training&rev=1669207782&do=diff Palo Alto Networks Training Palo Alto Networks offers both free and paid for training courses. Details can be found on their education page. It is on that page you will be able to find links the the following courses: Free The free training material is hosted on the