show counter global filter category flow aspect dos

Hi,

Below is  output of  'show counter global filter category flow aspect dos' 

What does it mean by value and rate . Does it mean '143291' packets dropped ?     

PA blocks outbound port 10443, doesn't show up in logs

I have and external website that I need to access on port 10443: https://<public IP>:10443. The connection never completes and times out. 

If I pull the PA FW out and throw in an ASA, works just fine. The logs on PA don't even show port 10443 being

SMTP weird characters

Hi everyone!

My client's SMTP traffic goes through ASA and Palo Alto and some other network application devices such as proxies and stuff.

At some point, the SMTP message gets some SMTP characters added.

I removed ASA ESMTP inspection just in case, and

incomplete and ddos drops

Hi

The following report shows incomplete

Database: Traffic Log
Columns: Source Zone, Source Address, Source Port, Destination Zone, Destination Address, Destination Port,
Application, Bytes
Query Builder: (app eq incomplete) and (port.dst leq 1023)

but

Importing device into Panorama with shared objects

Hello

I would like to import device into Panorama with all objects as shared into Panorama. I read the below line from PA documentation 

Is it possible to set Log Forwarding profile on ALL existing policies

So, we have been handed down a new requirement that ALL traffic logs must be forwarded to a new syslog server. I've created the server profile and log forwarding profile on my firewalls. My question is:

Is there an easy way to add the log forwardin

IDS/IPS Replacement Product?

What Palo Alto product represents the modern replacement or incarnation of an IDS/IPS?

Download of Panorama for VM-Series Base Images

Dear PA,

Is there any release of Panorama for VM-Series Base Images available to download? If yes, where and how.

I need it to run in the VMware workstation player to test. 

I didn't see the in the software  Updates of my account. 

thank you.

r

Source IP address is set to "none"

Hello All,

Lately I am noticing some polices that the Source IP address set to none as shown below can anyone let me know if none act like any or not?

I think yes as I created policy from Noc_OSS zone with IP add 192.168.*.* toward Default zone wit

Ethernet interfaces randomly resets

Hi,

I have an issue, I'm running PA-200 with PAN-OS ver. 6.0.12

I'm running Palo in Virtual Wire mode Eth1/1 is untrusted zone and Eth1/2 is trusted zone.

My problem is that from unknown reason the interfaces randomly just freeze (LEDs are going

Restart UserID will affect to the service?

Hi,

If i run these commands in FW will affcet to the service???

Please try restarting the User-ID 
>Debug software restart process user-id

>Debug user-id reset user-id-agent all

How log affect to the users? Should i ask for a window maintenance

Active-Active NAT Rule Binding

I can't find anything which goes into enough detail on Active-Active design around NAT and more importantly ARP.

The easiest way to explain the current deployment is as follows:

• Site 1 / Firewall A
• Site 2 / Firewall B

Each firewall is connected to uni

Best practice for blacklisting App-IDs

What is the best practice for blacklisting potentially harmful Application ID's(from "trust" to "untrust" over 80/443)?

I started blocking on specific App-ID's, but maintaining this blacklist per App-ID will be kind of cumbersome.

I'm thinking ab