General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Thinking about blocking executable file downloads - Gotchas?

In our environment, we have eliminated the scourge of people being local administrators on computers, with the exception of administrative accounts assigned to some of the IT personnel. I'm thinking about blocking the DLL, DMG, EXE, MSI, and PE file types for everyone but IT personnel. Are there any caveats or big gotchas related to doing so? ...

Resolved! Source Based Custom URL Lists

All, Does anyone know a way to setup source-based Custom URL Lists containing domains as an alternative to using source-based IP addresses and address groups? I don't think it's possible in any of the current versions of PAN-OS but i am looking at options. For example, if i want to limit inbound SMTP to our edge Exchange server from the Microso...

Switch from Static to Dynamic Address Object Groups

Hello all, we are running into an issue where we are unable to change static address object groups to dynamic address object groupsWe have an M500 and several PA7050 and the objects are managed under the "shared" device group for all the PA7050's. We have added tags etc. to the address objects and on the panorama they show up with their dynamic...

GlobalProtect VPN usage reports?

I'd like to generate a scheduled report of all the GlobalProtect VPN users connected in the last 24 hours. Is this possible to create in Pan OS 7.1?

Resolved! Setting filters for system logs for severity level High

I want to set email alerts for high severity alerts but want to put some filter for his high serverity also like some keywords.Is it possble to set email alerts only for some keywords in high severity alerts

Resolved! Office 365 - Polling issue

Hello, I have noticed an IP address which is published by Microsoft and not “mined” by minemeld: 40.112.64.16/28 in Office Identity. I don’t this this IP range in published IPv4 feed (I have imported default configuration published in Live). How do we collect the informations? How can we follow which information has been mined and sent to th...

Userid agent version for PAN-OS 7.1.6

What is the proper Userid agent version to be used for PAN-OS version 7.1.6?

Is it possible to "whitelist" a source in zone protection profile?

Some of our networking tools are triggering ZPP actions. Is it possible to whitelist a source so that thresholds in reconnaissance protection are not triggered? Altering the thresholds would make the recon protection basically ineffective.

Windows Updates across a Site to Site VPN

I have a WSUS server. I have a Site to Site VPN from a PA-3020 at a hosting facility to a Cisco ASA on my corporate network. The PA-3020 is running 7.1.4. When I try to run updates from the servers in the hosting facility, it shows as ms-update in the Traffic Log. The Session End Reason is “tcp-rst-from-server”. I am allowing all traffic on...

Resolved! Static Route via CLI

I have a firewall with multiple Vsys/VRs. Need to add a static route from one VR to another and I know I can do it via GUI, however I like to use the CLI if possible. So would this command add the static route from one VR pointing to another? set network virtual-router VR-Inside routing-table ip static-route 10.10.10.10/32 nexthop next-vr VR-I...

Captive Web Portal isn't working as expected

We're a school and have just started implimenting BYOD for our Students. Along with this is the requirement to Authenticate the users their BYOD devices so we can monitor and filter their web usage. This is easily done with our PA-3050, or so we thought! Our current setup is that our Student BYOD devices are in their own VLAN (known to the PA vi...

Global Protect certificate error

Hi, We are testing GProtect 2.3.2 version and its not working fine.Debug GP client shows "WINHTTP CALLBACK_STATUS_FLAG_CERT_CN_INVALID". The certificate is issued with the Common Name clientvpn.xxx.xxx, and this is the address of the portal. If instead of the DNS name of the portal, we put the IP address, the client warns that the CN of the cert...

get flood protection

Hi,İs it possible to protect from ? Regards

block specific user social media, google ads, youtube channel,apps store?

Dear all, my customer have some of this requirments, can palo alto do this stuff:1.can palo alto block specific user in social media like facebook. example: block user name contains john? or block twitter user?2. Block google ads?3. Block specific youtube channel, example: block youtube channel based on parameter Age-restricted content? or block...

What is the difference between Firewall throughput and Threat Prevention throughput?

My company has a 100mbps symetric ISP connection and will be purchasing a PAN firewall, PAN-200 or PAN-500. Is "Firewall throughput" the capacity to sort only on TCP/IP data while "Threat Prevention throughput" is the capacity to sort on the entire packet? If so, and we purchase the subscription for anti-malware protection then it seems that th...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!