downloads time out

Greetings,

i built a new dmz with a short list of apps allowed in (trust) out (untrust) and am having issues with downloads initiated using http(s)

seeing the download age out. i have allowed ssl and web-browsing and  a few other apps....can anybody h

Reporting on Coin Miners

I would like to get a view on what crypto/coin mining activity is going on inside my network but there isn't an application category that covers this - they are just classified as internet-utility and have varying other attrributes.  I can't create a

Happening in June: The Complete Zero Trust Network Security Event

Greetings everyone, 

Don't miss Palo Alto Networks' Complete Zero Trust Network Security event coming up in June. 

This event will cover the following points related to the newly unveiled Zero Trust Network Security:

• Secure access to the right app

Can we create a user group incluing another set of mapped user group from AD?

Hi All,

We have a challenge such that, there are around 100 mapped user groups from AD and we need to add them in a single rule. Is there any way we could add those user groups to another single user group and use it in the rule?

Thanks!

Pre-defines application not working ?

Apology for asking multiple question for the past one week..

We've define a policy to allow active-directory-base application which includes most of the AD standard ports, but the traffic is not hitting the policy, eventhough the destination ports ar

Unable to access Google Drive

Hi,

Google drive is allowed in Gsuite url category but user is able to access gmail and google calendar but when try to access Google drive and Docs and sheets,it is being blocked by firewall under storage-and-backup category.

What is the possible so

User-ID rule to bypass HIP check not matching.

Hi all,

I have a rule to allow certain Global Protect users DNS and RDP traffic by matching the user-id. However, even though it looks like the traffic should match when I view the traffic log it's not?! For some users the rule works fine but others

External Dynamic List retrieval on PAN-OS 9.1.2

Hello message board, this is my first post!!!!

I am trying to set up a EDL feed from XSOAR into the NGFW for O365 IPv4 addresses. Tested the feed using curl, both locally and remote, and it is working. The issue is fetching the list from within the N

Source ip region/country showing incorrect on PA firewall

In the Palo alto firewall for the public ip 205.254.183.218 source ip region is showing as US. but user is located at India.
we have given access on firewall for source region India only for inbound traffic.

In the traffic logs source country is showin

Ubuntu 18.04 install errors

Hi There, 

Running into issues trying to install on Ubuntu 18.04

During the install process at the end I get this message:

TASK [minemeld : requirements] ******************************************************************************************

Syslog server flapping passive firewall.

I have Syslog configured in my firewall. but I am getting alerts on the passive firewall for two weeks.

The service route is configured via the management interface. the alerts are generated frequently.

The active firewall is working fine.

Below is the

PANGP virtual adapter disabled automatically

Many of users are facing issue in connect Global Protect VPN. We notice when we restart PANGP virtual adapter disabled automatically .we restart service and after that issue fix for day or two day’s but again this issue persist. Requesting you please