Feature Request List

Reply
L7 Applicator

Re: Feature Request List

Added FR ID 11012 - Windows Server 2019 support for User-ID Agent

L3 Networker

Re: Feature Request List

Reached out to my SE with these:

 

1.  run a "user activity report" 

in the "Download URL logs" link which open up a CSV file, please in this file include either the original Username or IP address which was entered into the box on the original "User Activity Report" dialog. We are concerned that Lawyers might not hold the file up in court since it doesn't have a username / IP tied to it.  Only the "Download User Activity Report" has that. - FR11763

2.  Log and report search keywords - user typed in suicide into Google - FR6186

3.  Show current interface bandwidth in a dashboard widget. Be able to log over time. - FR4507

4.  Log /report / make a column header the TLS/SSL version detected on HTTPS sites. - FR5678

5.  Allow the GUI to change colors - themes.  Maybe a dark theme?- FR11765

6.  In "Response Pages", have a "Preview" link, so that we can see the page quickly without having to download and open in another browser.  Useful when making changes.- FR913

7.  Allow for more "User Activity Report" customization - pie charts, different bar charts, color, tables, etc. - FR11764
 
Tags (1)
L7 Applicator

Re: Feature Request List

Hi @dannon 

 

I have added your FR IDs to the list. And in addition I have some comments:


@dannon wrote:

1.  run a "user activity report" 

in the "Download URL logs" link which open up a CSV file, please in this file include either the original Username or IP address which was entered into the box on the original "User Activity Report" dialog. We are concerned that Lawyers might not hold the file up in court since it doesn't have a username / IP tied to it.  Only the "Download User Activity Report" has that. - FR11763


What abour simply downloading the logs directly from the URL logs?

 


@dannon wrote:

3.  Show current interface bandwidth in a dashboard widget. Be able to log over time. - FR4507


Since PAN-OS 8.1 there is a device health monitoring in panorama which includes bandwidth

 


@dannon wrote:

5.  Allow the GUI to change colors - themes.  Maybe a dark theme?- FR11765


This is already possible with browser extensions (maybe even directly in the browser) by enabling high contrast modes or by changing the css.

 


@dannon wrote:

6.  In "Response Pages", have a "Preview" link, so that we can see the page quickly without having to download and open in another browser.  Useful when making changes.- FR913


Because of the low number of this feature request this one is already pretty old so I think the chances that this (checkpoint) feature will be implemented are not that high...

L1 Bithead

Re: Feature Request List

FR-11251: Panorama High Availability: MFA using SAML (Okta)

 

When using SP-initiated SSO from PAN-OS via Okta and SAML, the SSO profile selection is sync'd between Active/Passive. Thus, you can only log in to one of your devices from an HA pair--e.g. if your SAML auth profile and its associated configuration in Okta redirects to the Active device's ACS URL, then you can only authenticate to the Active device. If you initiate SSO from the the Passive device, it will fail because you are redirected to the Active device's ACS URL and the assertion is for the Passive device.

L0 Member

Re: Feature Request List

We desperately need PANOS to support more than 8 ae interfaces.  We have some large chassis (with multiple vsys) that are embarrassingly underutilized because we can't assign more ae interfaces to them.  This seems like such a minor tweak, but it would help us fully use the hardware investments that we have made.  Please help! 

L7 Applicator

Re: Feature Request List

Hi @tforeen 

Please reach out to your SE to have him create a feature request for this. Once you have the FR ID you can post it here and I will add it to the list, so others can see this and vote also for the FR. But as I am not a paloalto employee I cannot create the Feature request for you.

L3 Networker

Re: Feature Request List

Hi @dannon 

 

I have added your FR IDs to the list. And in addition I have some comments:

@dannon wrote:

1.  run a "user activity report" 

in the "Download URL logs" link which open up a CSV file, please in this file include either the original Username or IP address which was entered into the box on the original "User Activity Report" dialog. We are concerned that Lawyers might not hold the file up in court since it doesn't have a username / IP tied to it.  Only the "Download User Activity Report" has that. - FR11763

What abour simply downloading the logs directly from the URL logs?

The boss specifically is concerned about detailed user report - he has a specific need to see all traffic for a particular user.  He says it allows the ability to see "intent".  It's because our HR dept is very wishy-washy and don't want to repremand someone unless there is bullet-proof evidence.  I guess the boss is extending this rationale to a legal scenario.  I don't always agree with the logic, but it's what he wants to see.

 

@dannon wrote:

3.  Show current interface bandwidth in a dashboard widget. Be able to log over time. - FR4507

Since PAN-OS 8.1 there is a device health monitoring in panorama which includes bandwidth

We only have 1 firewall, so aren't going to get buy Panorama.  Would be nice to add a widget to the existing dashboard natively.  I would think it wouldn't be that hard.

 

@dannon wrote:

5.  Allow the GUI to change colors - themes.  Maybe a dark theme?- FR11765

This is already possible with browser extensions (maybe even directly in the browser) by enabling high contrast modes or by changing the css.

I've had other vendors (Fortinet) that allow this natively.  It's not a high priority, but since others can do it, why not Palo?  I just thought I'd add it to the list for the future in case someone else wants the feature too.

 

@dannon wrote:

6.  In "Response Pages", have a "Preview" link, so that we can see the page quickly without having to download and open in another browser.  Useful when making changes.- FR913

Because of the low number of this feature request this one is already pretty old so I think the chances that this (checkpoint) feature will be implemented are not that high...

Understandable, but again, included just to have a request out there.

 

 
Tags (0)
 
L7 Applicator

Re: Feature Request List

@BenjaminCole thanks for sharing

FR ID 11251 is added to the list

L3 Networker

Re: Feature Request List

L7 Applicator

Re: Feature Request List


@OGMaverick wrote:

FR ID 11012 looks to be completed as per https://docs.paloaltonetworks.com/compatibility-matrix/user-id-agent/which-servers-can-the-user-id-a...


Thanks @OGMaverick . I have updated the FR ID in the Feature Request list

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!