Thinking about blocking executable file downloads - Gotchas?

In our environment, we have eliminated the scourge of people being local administrators on computers, with the exception of administrative accounts assigned to some of the IT personnel.  I'm thinking about blocking the DLL, DMG, EXE, MSI, and PE file

Switch from Static to Dynamic Address Object Groups

Hello all,

we are running into an issue where we are unable to change static address object groups  to dynamic address object groups

We have an M500 and several PA7050 and the objects are managed under the "shared" device group for all the PA7050's. W

GlobalProtect VPN usage reports?

I'd like to generate a scheduled report of all the GlobalProtect VPN users connected in the last 24 hours. Is this possible to create in Pan OS 7.1?

Userid agent version for PAN-OS 7.1.6

What is the proper Userid agent version to be used for PAN-OS version 7.1.6?

Is it possible to "whitelist" a source in zone protection profile?

Some of our networking tools are triggering ZPP actions.  Is it possible to whitelist a source so that thresholds in reconnaissance protection are not triggered?  Altering the thresholds would make the recon protection basically ineffective.  

Windows Updates across a Site to Site VPN

I have a WSUS server.  I have a Site to Site VPN from a PA-3020 at a hosting facility to a Cisco ASA on my corporate network.  The PA-3020 is running 7.1.4.  When I try to run updates from the servers in the hosting facility, it shows as ms-update in

Captive Web Portal isn't working as expected

We're a school and have just started implimenting BYOD for our Students. Along with this is the requirement to Authenticate the users their BYOD devices so we can monitor and filter their web usage.

This is easily done with our PA-3050, or so we thou

Global Protect certificate error

Hi,

We are testing GProtect 2.3.2 version and its not working fine.

Debug GP client shows "WINHTTP CALLBACK_STATUS_FLAG_CERT_CN_INVALID".

The certificate is issued with the Common Name clientvpn.xxx.xxx, and this is the address of the portal.
 If inste

get flood protection

Hi,

İs it possible to protect from ? 

Regards

block specific user social media, google ads, youtube channel,apps store?

Dear all,

my customer have some of this requirments, can palo alto do this stuff:

1.can palo alto block specific user in social media like facebook. example: block user name contains john? or block twitter user?

2. Block google ads?

3. Block specific yo