I have created my LDAP server profile and my group mapping under user identification. However when I try and force the group update I get an error. Server error : op command for client useridd timed out as client is not available Any ideas?
dear engineers.could you help me!!I have the following problem with the URL filter:I commented that I have blocked the streaming media category in which enters youtubewhen I open firefox without any problem with the rule applies both http and https.But when I open the page with chrome does not apply the rule.I can do help me !!!
I'd like to start by saying, that this is an amazing tool! Thanks for sharing this, it has great potential and my customer is excited. One question: is there currently any support for creating and maintaining local IP and domain blocklists on the MineMeld? Instead of setting up a miner to go out and consume a feed, we'd like to be able to create...
There seemed to be a work around in the past where you could launch googledrivesync.exe with a --unsafe_network switch that would allow it to deal with the decryption because they seem to have their own preloaded set of CA's the client trusts and doesn't not look at the OS certificate store for a list of trusted CA's. So anyway this used to work...
Since upgrading to 7.1 I've noticed that the new font used in the Web GUI is very hard to read. In many places it appears squished and just looks wrong. In the list of what's new in 7.1 this is actually touted as a "font update" but it sure seems like a step backwards to me. Has anyone else noticed font readability issues in 7.1? Web Interfac...
The PA-500 datasheet indicates that the maximum throughput for traffic being filtered by App-ID is 250Mbps https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/pa-500/pa-500-ds.pdf What it doesn't say, is what if I just have two devices connected to two 1Gb ports and the PA is just doing switching between the two ports w...
Just floating this out to the community. We have had decryption enabled for the past 2 years. In the last 6 months we are adding a new site to the no decrypt category about once a week. We are up to 94 sites that it can't decrypt. Yesterday it was Office365 exchange that stopped woeking, today was the kicker with microsoft updates failing even t...
Hello everyone! I've got a question about the behaviour of the new ACC in 7.0 and above. I can apply a global filter for the action of deny. When I do this, the graphs show no data, even if I click refresh. If I click 'jump to logs' with the filter still in place then I can see the logs/data in there ok. Removing all ACC filters allows t...
Hi, Below is output of 'show counter global filter category flow aspect dos' What does it mean by value and rate . Does it mean '143291' packets dropped ? name value rate severity category aspect flow_dos_red_tcp 1143291 0 drop flow dos flow_dos_pf_ipfrag 57444 0 drop flow dos flow_dos_pf_icmplpkt 1100 0 dr...
I have and external website that I need to access on port 10443: https://<public IP>:10443. The connection never completes and times out. If I pull the PA FW out and throw in an ASA, works just fine. The logs on PA don't even show port 10443 being accessed or logged. No matter what log I check, I find nothing. Any idea? Thx
Hi everyone!My client's SMTP traffic goes through ASA and Palo Alto and some other network application devices such as proxies and stuff.At some point, the SMTP message gets some SMTP characters added. I removed ASA ESMTP inspection just in case, and still the characters appear.Is there any kind of inspection such as the one in ASA to disable in...
Hi The following report shows incomplete Database: Traffic LogColumns: Source Zone, Source Address, Source Port, Destination Zone, Destination Address, Destination Port,Application, BytesQuery Builder: (app eq incomplete) and (port.dst leq 1023) but the " show counter global filter category flow aspect dos " does not give any indication of drops...
Hello I would like to import device into Panorama with all objects as shared into Panorama. I read the below line from PA documentation Import devices' shared objects into Panorama's shared context is enabled by default, which means Panorama imports objects that belong to Shared in the firewall to Shared in Panorama Now the question is the how t...
So, we have been handed down a new requirement that ALL traffic logs must be forwarded to a new syslog server. I've created the server profile and log forwarding profile on my firewalls. My question is: Is there an easy way to add the log forwarding profile to ALL of my exixting policies? Or, am I going to have to do this one policy at a time?...
What Palo Alto product represents the modern replacement or incarnation of an IDS/IPS?
PavelK
on:
Replacement of RMA
