General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! CLI checking licenses

Hi everyone! 2 quick questions in 1:

-To be able to include a URL as destination in a policy, do I need to have license for URL filtering?

-How can I check what licenses do I have in the CLI?

Thank you!

No Email protection for SaaS

The closest way to protect a SaaS email soltuion I have found is Proofpoint which has a wildfire API hook option.

I am supprised there is no SaaS service for forwarding attechments or inline scanning of email directly from paloalto networks.

Resolved! Block Traffic Based Upon Countries Source. Vulnerability Protection and For a Specific Time Interval

Hello

My objective is block automatically traffic IP for a different time intervals Based upon Countries (Top attack) and applying a vulnerability profile.

This is my Vulnerability Protection Profile and his rules:

Rules (1-3600 sec). I don't wan

...

We are working on hardening our firewall rules by replacing any to application default(service) and from any to the specific application(application). Example - we changed any to web-application and any to application-default. People hitting the same

...

High count of packet retransmissions/Dups over IPSEC/VPN

Hi!

I'm running IPSEC-VPN (AES256/SHA256/DH14) tunnel between a PaloAlto PA-500 and a Fortigate 110C via Internet (10MBit up/down guaranteed both sides - latency between 40 and 50ms).

90% connections are ICA/HDX connections (TCP 1494 and 2598) for X

...

ipv6 aggregator

Is there an ipv6 aggregator on the roadmap?

I noted that the URL aggregator can already extract them when the miners includes ipv6 IPs in the URLs (ex: office365), but did not find a way to get just the IPv6 addresses.

Resolved! dns amplification attack

Hi,

What are the best practices need to be followed to protect from the ddos dns amplification attack .

How to filter the trace from the log if there is any attack happened ?

Thanks

Resolved! RegEx for specific DNS strings

I was working on getting Data Filtering to block specific DNS requests with no resolution.

So, I am creating a Custom Application for DNS with a Pattern matching, which is partially working.

Working strings:

Under Objects/Applications/("Added applicatio

...

Export config from TFTP (non-management interface)

I was trying to export my running-config.xml with TFTP. It works fine when doing it from the management interface but is not working from any other interface.

If I use the source-ip to export the configuration i get a Timeout even though I can ping m

...

Who's coming to Ignite?!

We're only a week away from Ignite and the Live Community team can't wait. This year, we'll have an even bigger group of folks participating in the event. "reaper", "jdelio", and "kiwi" will all be there, participating in the Live Community booth, br

...

Resolved! Custom data pattern

How do you create a working custom data pattern file?

Resolved! Session End Reason column NOT available on PA200

Hi All,

I am checking traffic logs under Monitor tab.

In order to troubleshoot issue and understand behavior of a specific traffic flow, I think "Session End Reason" column is really needed.

That's why I am writing on community.

We have two PA f

...

One is used to Panorama and another is used to log-collector.

I upgraded two M-100s from 6.0.9 to 6.1.10.

I used manual upgraded way because environment what can not access to internet.

1. panorama was upgraded to

...

Discussions