Authentication for educational site, before being controlled by PAN

What I'm after is a system that acts as a RADIUS server to authenticate  both wired and wireless users over the network via EAP. The network will  then authenticate the user and allow them access to specific VLANs,  depending on the user and what mac

SSL-VPN with Ldap

I´m trying to configure ssl-vpn to authenticate users in ldap server or locally with imported users from Ldap via PAN. The only way that I’ve successful login´s is when I create a local user in Palo Alto firewall. I´ve got connection to Ldap servers,

PAN_agent NETBIOS Probing

Hello, from DOCs on teh Palo Alto site is not clear for me what NETBIOS probing on the PAN_Agent 3.0 does ?

Since the login is checked on DC reading security log messages, what is the purpose of the NETBIOS probing ? How does it work exactly ?

Users/groups informations are not displayed while configuring a policy

Hello,

The issue is while configuring a security rule, by cliking on the "source user" filed, the groups/users are not displayed for choice. I'am using PAN-OS 3.0.9. The firewall is connected to UIA and he is receiving normaly users inofmrtaions.

Regar

Is the e-directiry agent 3.1 able to authenticate communications with clients?

Hello,

We are planning to use the XML API. And i noticed that it requires an ssl communications between clients and the agent. I want to know if the agent is able to authenticate communication with client. And if not, is there any plan to implement th

RSA SecureID on PA 3.1

Any Documentation on setting up the RSA SecureID?

Both Admin Guide and CLI Guide have no details.

Mostly focus on SSL VPN where we setup the sdconf.rec on the Palo Alto Device via CLI.

PAN-Agent Multi Domain and Group membership

Hi,

We have a forest domain with 2 child domains. Now I have 2 pan agents installed for both domains and it's working well.

Now I have the following problem about wich groups to use.

I must use 2 global groups to give users access through the firewall.

x-forwarded-for and User Identificaton

We have configured x-forwarded-for flagging along with the User Identification.

Traffic logs from a tap upstream of a (squid) proxy carry the x-forwarded-for flag, but the IP is not resolved to a user.

Is this expected behaviour? (i.e. is ip-to-user tr