Aerohive Log / User IDs / Device Mac

Hello,

we have some Aerohive WiFi access points and they are managed with the HiveManager.
Now when a user logs on to a WLAN SSID with his hive user and then surfs, you only see the internal IP of the access point in the Paloalto Log. If several users

Teamviewer is not blocking

Hi,

I have PA-820 with fully updated signatures, I have blocked Teamviewer via security policy. PA is recognising the application and traffic log showing that teamviewer connection is blocked but on host machine teamviewer is running and outbound / i

Okta Admin Authentication on HA deployment

Hi,

I have configured multiple Active/Passive firewalls for Okta SSO (admin authentication) this is working as expected on the active devices, however I was planning to use a separate authentication profile for the passive devices. Everytime I push t

PA-3220 HSCI port's LED is not light up

I've got two new PA-3220s in HA (active/passive). Active firewall's HSCI port does not light up green LED, whereas passive light up green. I used an SFP+ and MM cable (tried Twinax as well). I have a replaced firewall for active firewall, but it stil

SSL decryption presenting untrusted certificate for certain site

Can somebody explain why the PA is presenting the untrusted certificate when browsing to https://community.mcafee.com ?

So far all of the other HTTPS sites that I've tested have worked perfectly.  This is on 7.1.3.

I opened a ticket with PAN and the

Data Pattern regex for identifying Mobile No. and Email Id

Hi All,

One of our customers has the following requirement:

1) They would like to restrict document going out from their network which has more than 5 mobile numbers.

Thus would require a regex of mobile no to be configured in Data Pattern.

2) They wou

Change panorama pushed virtual-router settings from firewall cli.

I have to change the BGP local-as on some of my firewalls.  The virtual router settings are set from Panorama (part of the template) so I tried using the override command like this but it didn't take.  "Invalid syntax".  is this not a possibility to

Clientless App feature enable BUG 8.1.3

The only I can describe this configuration is that is is a bug. I do not see any reason why such a feature would exist and not be clearly documented.

Issue: When commiting that change after deploying a GlobalProtect Clienless app a warning would appe

Global Protect, use custom port for portal, followed the tutorial on paloaltonetwork

Hi,

I followed the tutorial : How to Configure GlobalProtect Portal Page to be Accessed on any Port but it's not working.

When I connect using browser I get an error. I see in monitor that the port is accessed and I see the rules for the nat as well,

GlobalProtect agent can not connect to my internal Network

Hello,

After correctly configuring global protect VPN on the firewall, and installed the agent globalprotect on the remote machine, when I am in connected mode with the agent I can not connect to my internal network not even send a ping, I checked the

logical interface packets drops

Hi,

we are experiencing this issue that we are troubleshooting from a couple of days. we have done all our checks WAN and LAN side however there is a paloalto firewall between WAN routers and core switch in a Vwire mode with an any-any rule. the only