General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! What is the behavior of the URL Filtering Continue action?

What is the behavior of the Continue action once the user selects the Continue option? My understanding is that it opens the entire category for that one specific user until the timeout. However, in testing, the continue button is allowing multiple users to access that cetegory once the Continue button is selected. Is this the correct behavior?

Resolved! packet rate limit

Hi,Where can ı find packet rate limit for 5050 and 5060 ? (not new session per second)

Exchange 2016 Mailbox Servers in the DMZ

Has anyone had any issues deploying Exchange 2016 servers in a "DMZ" behind the Palo Alto firewall? Microsoft does not support this configuration and their preferred architecture is to put the Exchange servers in the internal network. Because these Exchange servers are public facing, we are pushing to have the servers set up in our DMZ.

Upgrade to 7.1.6 application-default issue

So the release notes for 7.1 say that "When you configure a Security policy rule with the Application setting Any and the Service setting application-default, all applications are now permitted only on their standard ports as defined in Palo Alto Networks Applipedia." I thought that was the case previously but that is not the point of this post....

Resolved! Wildfire - Connection hold

Hi all, Just a question: I didn't understand Wildfire mechanism related to a single session.Is there a connection hold when waiting for a response (benign, malicious) from PA cloud by default? Is that configurable?If the answer is Yes, but where? Best RegardsLuca A. Di Leo

What should we buy for active passive HA?

Hi, We are using pa-3050 running 7.1.x with 3 year premium partner support and 3 year threat prevention license for about 2 months. We want to setup active passive HA. So What do we need to buy? Will buying only pa-3050 hardware without any support or license be enough for active passive HA? Thanks, Rahman.

Skype is not working properly.

I am using skype for my office work. As i can send messages to others but i am not reciving messages from there side. And they are sending. If i check skype on mobile than i am able to see all messages. But on PC i am not receveing any of messages.Can anyone tell me why this is happening?

Chroomebooks and Transparent Authentication

We are a school district with 2-3,000 Chromebooks. Currently, we have a Palo rule based upon subnet that applies correct filtering policy. The problem is that we can't see which user is logged in, only the IP address. Does anyone have a solution for this? Does / Is Palo looking at something to correct this? Thanks.Dan

Custom Report for Phishing Attempts

Folks, Trying to make a custom report for phishing attempts in PANO. At a loss on how to do it for our 60+ devices.(LIke a daily report).Anyone here have any input? Couldnt find anything on the web for "phishing" specifically. Thanks folks...

upgrade path for 5020

Hi we have a requirement to upgrade a 5020 HA pair from 6.0.5-h3 to 6.1.15. Can I confirm that 6.1.0 is the only interim release needed? thanks

Resolved! Time-out Rule

We get a bunch of threat alerts from a single source IP from time to time, like someone running a script on or scanning a specific host for vulnerabilities. Some traffic is allowed through to the host. Does anyone know of a way to put an IP in a time-out when they appear to be doing something like this? My thought would be if a host on the inter...

MineMeld Miner's no worky...

MineMeld Guru's,Any advice on why Miners aren't downloading indicators is much appreciated. Here's where I'm at...-Running version 0.9.30-System tab says everything is running-Nodes claim they are connected but haven't pulled in any additional indicators-I stood up the VM last week and it initially pulled in 909 indicators but hasn't changed sin...

Is is possible to have ACC assign different APP RISK based on the zone?

I would like to be able to assign a different RISK rating on the same app, say RDP.If RDP is seen on the management zone I would rate that as a RISK 2, however if seen on the Internal zone I would rate that as RISK 5. Does anyone know a way to do this short of having different firewalls for each zone?

PA is sluggish

I have removed a lot of rules and am down to 400 rules, I am up to OS 7.0.10 and upgrade the OS every other monthIn the las couple months the PA seems to be getting slow and not as quit to commit changes or to pull up the dashboard when I first login. Any ideas where to look for possbile issues?

Resolved! Traps Pricing

Does anyone have a rough idea of how much traps runs per endpoint. We run roughly 800 laptops and desktops that this would be deployed to but I'd like to get a rough idea of pricing to determine if this is something that management would actually try to push through and I should spend the time looking into. Thanks!

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!