Global Protect - Problem with name resolution DNS/WINS

Dears,

We are facing a strange problem... sometimes external users connected via global protect cannot resolve names without the sufrix domain... 

Example:

\\NAMESERVER

or

http://netflow:8080

Strange behavior below: when we ping that name we see that it

Custom vulnerability Signature

Hi,

I am trying to create a custom threat signature based on the HOST: header in the URL request and URI request field. The signarure is working as expected. Issue is when I tried to add a pattern which is less than 7 bytes in http-req-host-header fi

PA4020 to PA3050 migration path

Hi, We bought a PA3050 appliance that will replace our PA4020 appliance. So I need to know how to migrate data and configuration from the older one to the older one. Is it possible jutst by copying files from one to the other?.

Thanks

reporting options based on compliance

Hi All,

         I am using pan os 7.0.2, is there any option to generate compliance based reports from firewall itself.

with regards,

Ram Balaji.

Upgrading and restoring the backup based on different versions

Hi all,

          I am using pan os 7.0.2, can we restore the current config saved file to 7.0.1 or 7.0

with regards,

Ram Balaji.

PA object naming schema/convention?

Was about to create a naming schema for PA firewalls objects, but I am wondering if someone already has something I can model mine on so I don't have to reinvent the wheel.

Reports only show 5 rows of information

I'm attempting to create a custom report, where data is generated in either 10 or 25 rows. For example:

Top 10 denied applications

Top 25 URL Categories

Top 5 users for top 5 apps

My problem comes when the report is generated and emailed. No matter the

Could I change session timeout to 24 hours for all applications?

Hello,

I have two questions.

First, Could I change session timeout to 24 hours for all applications?

Each applicaitons have each different session timeout value.

My customer would like to change session timeout of all applications to 24 hours.

Do you kne

Palo Alto on Microsoft Hyper-V

All the documentation i have read say PA is supported on VMware ESXi but i want to know if it can be installed on

Microsoft Hyper-V.

IPSec-ESP trough PA-7k only unidirectional best practice? Work around bug (ID:80950)

Hi,

due to a bug (ID:80950), that PANW is not able to fix, it is necessary to create seperate IPSec-ESP policies for both directions trough the PA-7050.

IPSec-ESP that comes in response to a opened session is being dropped if there is no separate pol

logs in the web console and logs in the terminal are different

Hi , 

The log in the web console and  the log in the  terminal shows different .

For example session id 39362 is showing different source ,destination , ingress and egress when running show session id 39362

Please help 

Thanks