General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

LDAP and GlobalProtect

Hi,

I am trying to set up Globalprotect.

Would like to restrict the user to a group, but I can not get this to work.

In Authentication profile i have the VPN-group in allow list.

When I logon with a user in this group the log tell me that i have incorrec

...

should Xenapp servers with TS-Agents installed ip addresses be manully excluded from userID agent monitoring?

Had a brief glitch recently on PANOS 5.0.6 where it appears that an administrator perhaps RDP'd (or something similar) to a Citrix Xenapp server which triggered a user-id/ ip mapping and doing so seemed to override the TS-Agent user mapping for exist

...

Resolved! LDAP for User Mapping

Hi,

Can anyone explain: LDAP profile is needed just for User group mapping or in general for user mapping? Now i'm confuse.

Resolved! Captive Portal Login Button

Has anyone been able to change the button on the captive-portal custom webpage to be anything other than the word "Login", for examples where we want a guest only button this sometimes need to read "I Agree" to bind users to an acceptable use policy.

...

Resolved! What is a "large" deployment for User-ID on the firewall?

We have a pair of 5020s and about 4000 users on 4 AD controllers. Throughout the 4.0 and 4.1 series, we have seen the Windows-based UserID Agent drop groups and users, and are interested in seeing if native event log polling from 5.0 might help. Targ

...

User-ID stopped populating mappings - OS 4.0.12

I am running OS 4.0.12 and have an issu with the user-ID / mappings not populating in the logs.

show user pan-agent statistics:

IPs Activity Timer(s) Domain Index

ncmpdcden01 10.250.12.10 5009 vsys1 *connected, ok 989 9

...

Resolved! Captive Portal Behavior

We have configured the captive portal for category 'Adult and Pornography' . Our question is, will the captive portal start every time or only when you are an unknown user? If the user is known (using Active Directory), is the user still being prompt

...

Resolved! about agentless user-id in panos-5.0

Hello

I have a questions about agentless user-id in panos-5.0.

I know that cache time of user-ip mapping information is 45 minutes(default) on agent and cache time is 1 hour(default) on FW in PANOS-4.1.

Are these time values same in PANOS-5.0?

If it is r

...

Create a deny page for a specific set of users

I need to create a deny page for all web traffic for a specific set of users. I have the AD group created and have both the ldap and user-id agent setup. For this specific group when they try to browse the internet they need to get a page that says P

...

Resolved! Two client account on one PC

Hello

Each users have two and four accounts in their office.

All account are authenticated by Active-Directoy.

Each users use several accounts on one PC at the same time.

For example,

Mr, A has 'AAA' account and 'aaa' account.

He uses 'AAA' account when co

...

User-ID Agent & Desktop PowerManagment

We have User-ID agent setup and running, Where it polls the machines every 20 minutes, to track the users.

Since we are now trying to implement Power management on the Desktop. It appears that the USER-ID agent system is waking the machines up. Has an

...

Resolved! User ID Mapping Directly to Firewalls

Good afternoon,

Previously we used the PAN-UID perl module to update User ID Agents running on servers, which would in turn update the firewalls.

With version 5.0, there is not this capability:

2.9 User-ID mapping

Beginning with PAN-OS 5.0.0, you can ap

...

Resolved! PAN as an explicit proxy?

Hi all,

I have a simple question, is it possible to make my PA-3020 work like an explicit proxy ?

I configured URL Filtering and I would like to adress web requests to the PA-3020 just like if it was a real explicit proxy...

Many thanks in advance.

Rudy

Resolved! How can I set connection limit per user or Source Address ?

I want to set connection limit per user or source address.

If anyone have set this please help me or if anyone got the guideline to resolve thi problem, please share here

Thanks

User-ID via NTLM and a BC explicit proxy

All,
I have an unusual install that dances around the borders of existing documentation and I'm hoping somebody can verify (or direct me towards documentation that does) whether this will work.

The user's browser are currently configured to use a BC pr

...