tcp-fin and aged out

I know there are timeouts set for different application is there a reason other that session table information. Is there any risk? Is it the firewall that is closing a connection? If so what would it close a active connection? Is there a security rea

What happened to the known issue "68484" in PAN-OS 7 release note!?

What happened to the known issue "68484" in PAN-OS 7.0.0 !?

I see this in Release note for 6.1.4 but not in 7.0.0! Is this resolved?

"On Panorama, if you disable the Share Unused Address and Service Objects with Devices setting and perform a device g

Object Names and IP Addresses

I've run across an interesting "feature" in working with the Palo Alto system.  I'm converting from the Checkpoint platform and have found a feature that I use in the Checkpoint all the time, but don't have available in the Palo Alto Panorama.  If yo

User-ID for Exchange Permission Issue

Hi All,

I'm running an agent-based User-ID setup against three AD DCs and two Exchange CAS servers.  Unfortunately, despite having the Event Log Reader permission, I cannot seem to get data from the Exchange servers.  I am successfully getting data fr

IP Reputation from Brightcloud

I see there is a partnership with Palo Alto and Brightcloud over their IP Reputation product: BrightCloud IP Reputation Service for Palo Alto Networks | Webroot BrightCloud , however I don't see any documentation on it. I think they have only announc

How to block Sub-url's for https sites.

Hi,

We tried to block  the sub-url’s  for https sites on PA5020 but the same is not blocking.

Please clarify whether PA will block particular https ulr link.??

Thanks,

HA question

Hi,

In an HA pair does the passive HA unit also generate the canned predefined reports? Or only the active HA unit?

Thanks,

Emma

Problems with ms lync / url filtering

Hi all,

I am trying to get lync2013 working, and more specifically Skype for Business, successor of Lync. I have Lync 2013 completely working, but I would like to permit all the wildcards permitted through url filtering, linked to a number of applicat

Time stamp of traffic/threat/url logs are 3 minutes into the future?

Threat logs, traffic logs, url filtering logs are all in the future by 3-4 minutes where everything else has the correct time from the ntp server. The dashboard shows the correct time and what's interesting is that the Configuration and System logs s

Unknown URL Category

How many of you have this category being blocked?  Any issues with web surfing?

Logging in to Palo is different if I fully qualify my login username or not

I stumbled on a difference if I log in to my admin account whether I fully qualify my domain or not.

Authentication is coming from an Authentication Profile that points to AD, uses LDAP and has the Login Attribute of the sAMAccountName.

In administrato

User Name Wildcards

I know this has been asked before, but not for a few years.  My usernames can take several different forms:

bob123

domain\bob123

bob123@domain

So how can I ask for a user activity report or other report saying user.src contains "bob123"?  Can I use a reg

What does it mean message which is "Packets dropped: invalid packet header content"?

Hello,

We are doing take-over test on A-A.

We are seeing packet-loss with the following global counter on Active-Secondary after take-over.

flow_fpga_rcv_tag_err                  32406      350 drop      flow      offload   Packets dropped: invalid pack

VPN Tunnel between static Palo Alto and dynamic Fortigate

What is the exact settings in order to establish a VPN tunnel between a Palo Alto firewall that has static WAN IP address and a Fortigate that has Dynamic WAN IP address?

If both has static IP address, the tunnel works.

If Fortigate has dynamic WAN add