What log shows when a device show down in Panorama is it in mp-log and which one?
What is the behavior of the Continue action once the user selects the Continue option? My understanding is that it opens the entire category for that one specific user until the timeout. However, in testing, the continue button is allowing multiple users to access that cetegory once the Continue button is selected. Is this the correct behavior?
Hi,Where can ı find packet rate limit for 5050 and 5060 ? (not new session per second)
Has anyone had any issues deploying Exchange 2016 servers in a "DMZ" behind the Palo Alto firewall? Microsoft does not support this configuration and their preferred architecture is to put the Exchange servers in the internal network. Because these Exchange servers are public facing, we are pushing to have the servers set up in our DMZ.
So the release notes for 7.1 say that "When you configure a Security policy rule with the Application setting Any and the Service setting application-default, all applications are now permitted only on their standard ports as defined in Palo Alto Networks Applipedia." I thought that was the case previously but that is not the point of this post....
Hi all, Just a question: I didn't understand Wildfire mechanism related to a single session.Is there a connection hold when waiting for a response (benign, malicious) from PA cloud by default? Is that configurable?If the answer is Yes, but where? Best RegardsLuca A. Di Leo
Hi, We are using pa-3050 running 7.1.x with 3 year premium partner support and 3 year threat prevention license for about 2 months. We want to setup active passive HA. So What do we need to buy? Will buying only pa-3050 hardware without any support or license be enough for active passive HA? Thanks, Rahman.
I am using skype for my office work. As i can send messages to others but i am not reciving messages from there side. And they are sending. If i check skype on mobile than i am able to see all messages. But on PC i am not receveing any of messages.Can anyone tell me why this is happening?
We are a school district with 2-3,000 Chromebooks. Currently, we have a Palo rule based upon subnet that applies correct filtering policy. The problem is that we can't see which user is logged in, only the IP address. Does anyone have a solution for this? Does / Is Palo looking at something to correct this? Thanks.Dan
Folks, Trying to make a custom report for phishing attempts in PANO. At a loss on how to do it for our 60+ devices.(LIke a daily report).Anyone here have any input? Couldnt find anything on the web for "phishing" specifically. Thanks folks...
Hi we have a requirement to upgrade a 5020 HA pair from 6.0.5-h3 to 6.1.15. Can I confirm that 6.1.0 is the only interim release needed? thanks
We get a bunch of threat alerts from a single source IP from time to time, like someone running a script on or scanning a specific host for vulnerabilities. Some traffic is allowed through to the host. Does anyone know of a way to put an IP in a time-out when they appear to be doing something like this? My thought would be if a host on the inter...
MineMeld Guru's,Any advice on why Miners aren't downloading indicators is much appreciated. Here's where I'm at...-Running version 0.9.30-System tab says everything is running-Nodes claim they are connected but haven't pulled in any additional indicators-I stood up the VM last week and it initially pulled in 909 indicators but hasn't changed sin...
I would like to be able to assign a different RISK rating on the same app, say RDP.If RDP is seen on the management zone I would rate that as a RISK 2, however if seen on the Internal zone I would rate that as RISK 5. Does anyone know a way to do this short of having different firewalls for each zone?
I have removed a lot of rules and am down to 400 rules, I am up to OS 7.0.10 and upgrade the OS every other monthIn the las couple months the PA seems to be getting slow and not as quit to commit changes or to pull up the dashboard when I first login. Any ideas where to look for possbile issues?
PavelK
on:
Replacement of RMA
