Problems with XFF cleaning

Dear all,

we are getting more and more problems with the way PA handles the X-forwarded-for header.

It is very useful in getting the internal client IP in a proxy environment. OTOH, you need to clean it before it goes out so that you don't leak interna

GlobalProtect: Pre-Login and user cert based auth?

Hi All,

I've successfully configured pre-login and can enter my creds in to the GP client the first time I log in and it works great. Is there a way to use a user certificate for the user auth and avoid any action on the users part for auth?

Desi

record reached max ression number

Hi

Pls advise if we have CLI cmd that record the PA box  reached max session number till now ...So I can assess if it will reach our session limited .

Thanks

Jeff Jin

QoS on Aggregate (AE) interface

Hi, I am using PAN 7.0.3.  I got two GigaE interface to form the AE Interface, however, I cannot set the Max Egress value more than 1000. 

And also, from the QoS Statistics and never seen the runtime bandwidth goes more than 1000. If so, it looks m

Issues with decrypt feature in the version 7.

Hello

Could you share with me the main issues related to decrypt feature in the PANOS 7.? if has the number of bug will be great.

Best regards

Andres Padilla

Wildfire - email notification issues

Has anyone else experienced wildfire email notifications not being sent to all team members?

Basically we have 3 team members who are all setup the same to recieve wildfire email notifications. One team member gets about 95% of the notficitions via

Panorama logs missing beofre a date

Hi,

We have 2 FWs sending logs to Panorama. We see the logs in Panorama after 3 January but not the logs previous this date. Why??? we havent done anything in Panotama for not to see this previous logs.

Regards,

JC

Time for URL category changes

Hi,

Is the standard period for URL category changes approximately 1 business day?  I thought this was the approximate turnaround however I have had 2 request exceed this time frame.  Is there a fater method than using Palo Alto Networks URL Filtering

Which are the prerequisites for Panorama 7.0.4 virtual machine?

Which are the prerequisites hardware for Panorama 7.0.4 virtual machine? We have always the CPU in 99%, with the process logd in 97%. Shoudld we put more CPUs and RAM to this VM??