How to delete a firewall user name from the security rule set using the XML API ???

I need help with the XMP API to delete a firewall user from a security rule set.

I'm getting an XPath error code = 3 (internal API error) from the following scenario

When I do a config command with action = show, I get a XML structure like this:

<respo

Skype: block file transfer !

Dear DevCenter,

I need you to define App-ID for transfer file in skype. In yahoo-im App, I see the yahoo-file-transfer App-ID, but not in Skype.

Please help.

Powershell to Update Custom URL Category

Wanted to contribute back with some powershell I put together to update a custom url category on a firewall.  I used several posts here, as well as some code from a Nessus Powershell script and the pan-python project as a basis for this script.  Also

H.323 Cisco Spam Calls blocking

Hi,

I am trying find out if anyone has successfully (without the creation of a blacklist) blocked these spam calls. I opened a support ticket with Palo Alto and they suggested that I reach out to this board for help.

We are constantly getting our con

Skip Value to Large Error from XML API

I am retrieving URL log entries via the XML API. I can successfully get logs when I skip none, but when I try to skip a larger number (for example, 5000), the firewall replies with error 17 "skip value too large".
<response status="error" code="17"><m

Retrieving Allowed Categories

When getting the details of a URL filtering object, I have noticed that the allowed categories are left empty in the XML (barring any custom URL categories). Is there anyway in the API to retrieve them?

I came up with a work-around of getting the list

Shared Policy push fails using XML API in PAN-OS 7.0

I am trying to push a shared policy to a device group using XML-API but it fails with the following error:

The Panorama is on PAN-OS-7.0.1. This issue does not exist when I am on PAN-OS-6.1.x

<response status="error" code="17">

 -<msg>

    -<line

Need help connecting to the API for loading partial config

I am trying to load a partial config from a pa5060 to a pa500.  It's been so long, I have forgotten how to connect to the API -- I've only done it once.  And, then I want to figure out the commands that I need to use when I load partial config on my

Custom signature for a website based off of Referer

I need to build a custom signature attached to an application that will identify a traffic pattern based off of source URL contains g.doubleclick.net and where pattern match equals Referer:http://www.savingforcollege.com. Then this needs to be assign

Can't connect to GlobalProtect

We recently implemented the solution GlobalProtect solution. Connect method is pre-logon. One of the users is unable to connect. Here are the logs.

(T2984) 08/05/15 12:09:24:550 Debug(3468): prelogin to portal result is

(null)

(T2984) 08/05/15 12:09:24

Creating Custom App-ID for an unknown TCP session that is encrypted or doesn't seem to have a pattern.

How do i create a custom App-ID if i can't see any pattern on the captured packets? The pcap data seems to be encrypted. For example, i was trying to create a custom app-id for the game Clash Of Clans and i can't seem to find any pattern at all.

App-ID to trap iodine (DNS tunneling)

Hi All,

I'm trying to create a custom signature to block iodine usage of DNS.

while doing a packet capture on it i spotted a returning set of values in the hex that would allow me to capture this traffic.

but i am not experienced enough to get this into

Custom threat signature to detect/block DNS TXT requests.

I'd like some help creating a custom threat signature that would would detect/block DNS TXT requests similar to threat signature ID:34842 which detects DNS ANY Request.

The goal is to disable DNS Queries regarding TXT resource records from our LAN to