Please explain the PanDB/Brightcloud's category “not-resolved”？

Hi,Guys: I found the category "Not-resolved" in device GUI(Both Pandb and Brightcloud), I searched it in paloaltonetworks.com and brightcloud.com website, But could not get any description about it. Any guy explain it ? Thanks Victor.Bai

Adding NAT rule order in Panorama cli

Hi all,

I am looking to add around 60+ NAT rules for monitoring over IPsec that requires a policy NAT. I need to have them above another rule in the list for it to work. It is a very messy NAT list that I don't have the freedom to clean up. The NAT e

PA allowing IM (viber,line,zalo) | PA policy process

Hi,

target is to allow im apps but modify categires.

I have created a policy allowing IM and modify most categories as block. 

Policy sample:

Policy is SRC: 192.168.x.x | DST: any | Srv: any | App: IM (viberbased,im,googlebased,ssl) | Url:BLK_CATEG

BL

URL Filter vs. Type in firewall?

Does the URL filter at urlfiltering.paloaltonetworks.com have anything to do with how a Palo Alto firewall classifies the 'type' of site?

I noticed that there are some sites that our firewall classifies as 'spyware' that the URL filtering site classif

Global protect error certificate

Hi,

We are having problems with globalprotect. We have tried installing several GP client versions 2.3.1,2.3.5 and 3.1.3 but the result is the same.

We cant connect using Windows or MAC, we receive a certificate error.

We read in the KB paloalto that c

How to blok vbs file into zip file?

Hello, I am getting lot of files (worms) through smtp as vbs file which are put to zip file. This zip file is not encrypted. How can I block this threat.?

GlobalProtect : Need a VPN that separates users into different VLANs; is this possible w/o Panorama?

I need my client VPN to support different vlans based upon authentication to either Microsoft NPS or LDAP groups.
I want a different vlan/IP assigned to the user depending on which group in Active Directory they are in.

Is this configuration possible w

How can I block web access for one mac address on my network?

Hi all,

I have a PA-3050 that I've been asked to configure so that it blocks web access for one of the machines on our network, but I can't seem to find the right place to add the mac address of this machine, and searching has failed me so far.  I'd

Unable to download updates

I have a PA-200 running 6.1.14.

I am able to generate a list of software updates, global protect clients and the dynamic updates, but when I attempt to download any of the files, I get the following error:

Failed to download due to network failure. P