Panorama 7.0.6

Hi,

We have several Palo Alto FWs in diferent PanOS. W want to update our panorama to version 7.0.6 but we dont know if this panorama in 7.0.6 could manage FWs in PanOS 5.0???

Regards,

Jesus C.

Blocking LinkedIn-Publish A Post

Has anyone been successful in blocking the Publish A Post option on LinkedIn. I don't kknow how to do custom application blocking if it is needed and tech support just said they would submit a feature request.

Thank You

Active Directory Testing

Hello Community,

My first posting here.

I have successfully configured LDAP / Active Directory on my VM ESXi. 

My Palo Alto can connect to the AD, see image

However, I don't know how to test to see users in the monitoring logs. I will need a VM

Group Mapping

I have created my LDAP server profile and my group mapping under user identification. However when I try and force the group update I get an error.

Server error : op command for client useridd timed out as client is not available

Any ideas?

Google Drive Sync client with Decryption

There seemed to be a work around in the past where you could launch googledrivesync.exe with a --unsafe_network switch that would allow it to deal with the decryption because they seem to have their own preloaded set of CA's the client trusts and doe

Web GUI Font Readability Issues After Upgrading to 7.1

Since upgrading to 7.1 I've noticed that the new font used in the Web GUI is very hard to read.  In many places it appears squished and just looks wrong.

In the list of what's new in 7.1 this is actually touted as a "font update" but it sure seems li

PA-500 Throughput

The PA-500 datasheet indicates that the maximum throughput for traffic being filtered by App-ID is 250Mbps

https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/pa-500/pa-500-ds.pdf

What it doesn't say, is what if I just have

Decryption causing more sites to fail

Just floating this out to the community. We have had decryption enabled for the past 2 years. In the last 6 months we are adding a new site to the no decrypt category about once a week. We are up to 94 sites that it can't decrypt. Yesterday it was Of

ACC Behaviour

Hello everyone!

I've got a question about the behaviour of the new ACC in 7.0 and above.

I can apply a global filter for the action of deny.

When I do this, the graphs show no data, even if I click refresh.

If I click 'jump to logs' with the

show counter global filter category flow aspect dos

Hi,

Below is  output of  'show counter global filter category flow aspect dos' 

What does it mean by value and rate . Does it mean '143291' packets dropped ?