Resolved! .yml file: PA device password in clear text

Hi Luigi,

.yml file for DagPush node in /opt/minemeld/local/config shows password of the device in clear text. It should be at least hashed.

Thanks

Regards,

Bertrand

Resolved! VMware ESXi 6.0 and PA VMs

Is VMware ESXi with vSphere 6.0 supported?

The technical documentation for the 6.1 virtual appliances states: "VMware ESXi with vSphere 5.0, 5.1, and 5.5 for VM-Series running PAN-OS 6.1."

And the 7.0 documentation states: "VMware ESXi with vSphere 5.1

Resolved! NAT and Security Policies, PBF Failover and Symmetric Return - Dual ISP

This is two parts:

1) I configured Destination NAT rules and corresponding Security Policies to allow inbound access to servers on private LAN.  These all utilize the Primary ISP public IP address.  If I want these internal servers accessible over the

Resolved! OSPF pocket in an EIGRP network

I am putting a PA firewall in our datacenter and am looking to have the firewall advertise the protected subnets out to the rest of the network.  However, the rest of the network uses EIGRP, so the datacenter switch and the PA firewall will need to b

Resolved! Policies >> Security

Unsure quite how to phrase my question. Under Policies >> Security:

I have a Rule way at the top for McAfee ePO; tcp; port 8443.

Settings that I have set are:

 Source Zone: Trust     Source: IP address for a specific internal host 

 Destination Zone: Un

Resolved! PAN response to: Attacking Next-Generation Firewalls: Breaking PAN-OS ?

So are there any response available from PAN regarding the topic which you can read below?

Like when are updates scheduled to be released, any mitigations you can perform before updates are available etc?

Or are they already disclosed (and fixed)

Resolved! Applications On Non-Standard Ports

It's perfectly possible I'm being unusually dumb here, but I can't see an elegant way of allowing application usage on non-standard ports - for example ssh on tcp/32777. The obvious way of doing it is to allow a rule that allows appid:ssh on service: