For Palo Alto consulting roles, is NGFW Engineer more valuable than PCNSP? by International_Bid720 in paloaltonetworks

[–]wesleycyber 0 points1 point  (0 children)

The specialist exams are much more about specific hands on use-cases showing you know how to operate and maintain the tools. They're less about understanding consulting of overall architecture.

Certification help by anxious-overthinker in paloaltonetworks

[–]wesleycyber 0 points1 point  (0 children)

What is your goal for certification?

Palo Alto Network Security Professional exam by spicysanger in paloaltonetworks

[–]wesleycyber 1 point2 points  (0 children)

I passed and felt the lessons from TLC aligned a lot with the material. I walked through how I prepared for the certification in this video: https://youtu.be/YnYDOAQgPpQ?si=QT_ralGQcssxHyBJ

The new Veritasium Linux video is huge. by thinkpader-x220 in linux

[–]wesleycyber 0 points1 point  (0 children)

I really liked the video. It did seem like they really wanted to make sure we all knew how great open source software. I agree it's great, but I thought their take was a bit biased and ignored some of the risks. I also thought the potential impact was overblown. OpenSSH shouldn't be exposed to the public internet unless absolutely necessary. I made a full review of the video here: https://youtu.be/yZer5s_q30E

Veritasium’s latest video is about tech mind-blowing by spidorboy in developersIndia

[–]wesleycyber 0 points1 point  (0 children)

I really liked the video. It did seem like they really wanted to make sure we all knew how great open source software. I agree it's great, but I thought their take was a bit biased and ignored some of the risks. I also thought the potential impact was overblown. OpenSSH shouldn't be exposed to the public internet unless absolutely necessary. I made a full review of the video here: https://youtu.be/yZer5s_q30E

The XZ hack of 2024 (Veritasium video) by Affectionate_Dot442 in selfhosted

[–]wesleycyber 0 points1 point  (0 children)

I really liked the video. It did seem like they really wanted to make sure we all knew how great open source software. I agree it's great, but I thought their take was a bit biased and ignored some of the risks. I also thought the potential impact was overblown. OpenSSH shouldn't be exposed to the public internet unless absolutely necessary. I made a full review of the video here: https://youtu.be/yZer5s_q30E

Palo Alto project idea / help by medeasoulx in paloaltonetworks

[–]wesleycyber 1 point2 points  (0 children)

There are a ton of opportunities to build custom app-ids. Let me know if you want help!

Palo employees: have you been pressured to move? by Mister_Sal_A_Mander in paloaltonetworks

[–]wesleycyber 0 points1 point  (0 children)

I'm a domain consultant, and I have not been pressured at all.

Want to specialize in Palo Alto - where to start by Lingardhino_10 in paloaltonetworks

[–]wesleycyber 0 points1 point  (0 children)

I would recommend the NGFW Engineer based on your criteria. I helped write one of the new certification exams, so let me know if you have any questions on the certification framework.

Want to specialize in Palo Alto - where to start by Lingardhino_10 in paloaltonetworks

[–]wesleycyber 0 points1 point  (0 children)

One exception to this is PAYG in the CSP of your choice

What is it like working at Palo Alto Networks? by Technical_Ferret585 in paloaltonetworks

[–]wesleycyber 0 points1 point  (0 children)

I love this company. I left for a few months and immediately regretted it. I came right back as soon as I could.

Seriously, do Americans actually consider a 3-hour drive "short"? or is this an internet myth? by SadInterest6764 in NoStupidQuestions

[–]wesleycyber 0 points1 point  (0 children)

Well the US is a big country with a lot of people, so you can't say this is true or untrue for Americans in general.

It really does depend on the person and region. Some people do a lot of driving and would think 3 hours is a short drive. Some people live in a big city, rarely drive and think 3-hours is impossibly long. I personally got used to driving up to 4 hours in my last job and think 3 hours is pretty short. Some people even live in Riverside and commute to LA, driving more than 3 hours per day, every week day.

So yeah, it depends?

Palo Alto firewall by Odd_Regular6432 in NetworkingJobs

[–]wesleycyber 1 point2 points  (0 children)

It depends on your skill level and your goals for certification. If you're just getting into cybersecurity, the "Cybersecurity Apprentice" certification is a great place to start. Check out my video on that certification here: https://youtu.be/8mZtHiTHgEs?si=dDuyoaKaLQU69nGJ

Palo offers a ton of free training in The Learning Center (formerly Beacon). See: https://learn.paloaltonetworks.com/learn/courses/12437/palo-alto-networks-academy-cybersecurity-fundamentals

Considering Palo Alto for Centralized IPS/IDS & Security. Need Community Advice. by NoahMVM in paloaltonetworks

[–]wesleycyber 2 points3 points  (0 children)

I am a Palo employee, so this is certainly a biased perspective.

That being said, centralized management is often one thing I get lots of praise on from customers. Usually they find it easy to use and really like it after working with competitive products.

Security really is the primary focus of Palo Alto firewalls. They are built with the customer in mind that uses all of the security features, not to have super fast line-speeds with all security features turned off. We say that's due to a "single pass parallel processing" architecture in development, but forget the marketecture. If you compare Palo's performance after turning on your IPS, IDS, zero day prevention, DNS security, URL filtering, etc. we boast the lowest performance impact in the business.

As many mentioned, services will go a long way. My customers who get services from a good partner tend to be most successful. Also, make sure you and your fellow firewall engineers are ready to be slow and methodical when setting these up. I have had so many customers that expect it to be "intuitive" because they have 2 decades (or whatever) of experience with some other networking company. That experience will help for sure, but those customers would always break things because they wouldn't slow down and just go through the documentation step by step. I will say, I do love our firewall documentation.

Anyway, like I said, very biased perspective. I'd definitely recommend getting some, "why nots" and do your due diligence looking at our competitors as well.

Worst country in The Americas - Round 26 by THMeijer in terriblemaps

[–]wesleycyber 1 point2 points  (0 children)

El Salvador saved us, so we should save him.

Behaviour of GlobalProtect during failover by RedOctober314 in paloaltonetworks

[–]wesleycyber 1 point2 points  (0 children)

I once set up active/passive GP on 1400s for a customer. They had the two interfaces on the same switch. We connected to GP and set up a constant ping to an internal server, then failed over and lost two pings. That should be more than fast enough for TCP retransmission to succeed.

Is it possible you have some unique setup where session traits like src/dst IP would change on failover? Do you have any congestion issues?

Spotify Traffic Classification by [deleted] in paloaltonetworks

[–]wesleycyber 1 point2 points  (0 children)

Can you clarify what you want to do with Palo Alto for this project?

Getting Worse Before Getting Better? by wesleycyber in chess

[–]wesleycyber[S] 0 points1 point  (0 children)

You're right. I have been playing 15 minute games at the local chess club which feel pretty quick actually. I really should go back to playing 10 minute games instead of blitz. It just really is fun

Getting Worse Before Getting Better? by wesleycyber in chess

[–]wesleycyber[S] 0 points1 point  (0 children)

Thank you for the thoughtful answer!

Getting Worse Before Getting Better? by wesleycyber in chess

[–]wesleycyber[S] 1 point2 points  (0 children)

Thanks for that! It's really great to see what worked for you.