Hi,İs it possible to protect from ? Regards
Dear all, my customer have some of this requirments, can palo alto do this stuff:1.can palo alto block specific user in social media like facebook. example: block user name contains john? or block twitter user?2. Block google ads?3. Block specific youtube channel, example: block youtube channel based on parameter Age-restricted content? or block...
My company has a 100mbps symetric ISP connection and will be purchasing a PAN firewall, PAN-200 or PAN-500. Is "Firewall throughput" the capacity to sort only on TCP/IP data while "Threat Prevention throughput" is the capacity to sort on the entire packet? If so, and we purchase the subscription for anti-malware protection then it seems that th...
I have a manager that would like to setup an alert wheneever a certain IP address hits our network. Does anybody know of an easy way to do this without creating a security policy and just monitoring that policy?
I have Panorama VM, and M-100 as log collectors.I want to use Eth1 and Eth2 on the log collectors, How can I do that if Panorama is a VM? Please advise. Thank you in advance.
Hi, I need to limit download bandwidth for multiple (more than 😎 subnets which are behind LAN interface. They need to have different limit values. I can't believe there is only 8 classes and I am limited to them. So is this a hardware limitation? What is the purpose of it? And most important, is there anything to workaround it? Thanks, Rahman
Hello, I have registered the PA-200 on support web site, and the license is showed correct on the web GUI and on command "request license info", but it still show "device registered: no" on "show wildfire status".Do anyone know why ? And how can I make it to the "yes" so I can use the wildfire function? Please help me ! Thanks.
I could see the node was having problems pulling the external resource due it being decrypted and our CA being used. I added our CA to the Ubuntu store with the processes used here, but still no juice. http://askubuntu.com/questions/645818/how-to-install-certificates-for-command-line Thoughts?
Hi Can someone clarifies if it is a default behaviour on PaloAlto to allow scan host sweep towards Internet? It is tagged as medium in Threat Prevention but the firewall unable to block it even though the profile is set to strick that block all Threats categorize from low to Critical. Thanks,Jabuens
Did I miss a notice that the http decoder was being changed so that most of my rules based on the web-browsing app would break? Nearly all of my web-browsing traffic is suddenly being identified as unknown-tcp. I notice in the release notes for 646 app update that the http decoder was modified.
Hi, We realised our PA in version 7.0.6 is having any issue with the traffic. We see many traffic being dropped by DENY all rule (the last rule in the rule set). Looking in application we see "non-syn-tcp" in all the connections. These denies connections always ocurrs each 30 minutes. For example: 4.01pm, 4.31pm, 5.01pm, 5.31pm. we have disab...
Hopefully this is a very simple question, but I wanted to make sure I was actually researching the correct thing. I am planning on connecting a hypervisor (Hyper-V 2012), directly to one of my Network Interfaces on my PA. The hypervisor has multiple VLANs, and I need them all to go through the PA. I incorrectly thought if I just set the VLAN/...
Hi, The miner Ransomware IP has > 10000 so I'am wondering how I could solve this issue. Should have some output feed that you can define to take a certain amount of IP's so you can map that on your hardware. And then create a second output that is skippen a defined amount of IPs an creating output feed with next range of IPs Something like:...
Hi all. We have two Palo 3020s, each connected to a different ISP. At the moment the 1st firewall handles all our LAN internet based traffic, whereas the second firewall is mainly used for our VPN connections. We're looking at forwarding streaming traffic from the 1st firewall to the second firewall, to reduce the bandwidth usage on our primary ...
We are standing up a new data center and there is some disagreement about whether the Firewall or the Router should host the IPSec VPN. The Security Team suggests the Firewall for a few reasons (Logging being the biggest)while the Networking Team would like to use the Cisco Router (Speed and ease being their reasoning.) Has anyone run into a s...
OtakarKlier
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
OtakarKlier
on:
Network wifi Management
