Hi, in packet capture , what is actually firewall stage type ? . Why thers is rx and tx separate ? sorry for asking a fuzzy question ? Thanks
Dear Live Community, I was wondering how I have ro configure pop3 traffic inspection in order to protect my network from malware and viruses in mails sent to me. My Linux server pulls various mail servers in the internet using fetchmail every couple of minutes. The connection is tcp/995 POP3S. The PAN is working in virtual wire mode between my...
I have been trying to test out a new policy that will need to be implemented by our security team. This involves a Deny All rule, with a rule right above it that allows a list of domains. These domains include SaaS services, Cloud, and other domains that users must access to achieve daily production. I have tried to make the whitelist based on ...
Is it possible with 6.1.x to where if a user wanted to change radius/tacacs password (before it expires or just because the want a new password) they can . Or if a user locks him/her self out and needs to change password. Is there a profile for this type of activity?
We started deploying Palo Alto in our environment about 6-7 months ago. We're up at 19 PA200s in production (we also use Panorama). Since we've been deploying these, I've had 6 units fail at 4 different sites. The failure is always the same, basically the ports 1-4 are dead. On some reboots they show as unknown/unknown/up when nothing is plu...
We use PA URL Category to block access to some sites i.e. Social media etc. I would like to export all the category names and their respective settings block / allow / alert etc. to an Excel or Text file. Can this be done, if so how
In the course of a regular day, it is not uncommon to receive regular legit word documents from people via email. However, increasingly we are getting documents pretending to be resumes, and the .doc file contains macros. Our version of Word 2013 treats these as protected documents and the macros do not auto open like the malicious user intend...
Hello, sorry, if I missed something obvious... but I need your help, because I have no lab environment where I could answer my question by just testing.... I have two PA-200 with HA Lite. Both have an outside interface connected to a switch: Firewall F1 with switch S1, Firewall F2 with switch S2. S1 and S2 have an interconnection. Now th...
Hi All, it seems that in the last days the whatsapp application is not always correctly recognized. From logs we can see that some connections are blocked. We don't think is due to the last dynamic updates, because we reverted it to precedent version does not solve the issue. We have look into the community but no one suggestions was found. Ha...
Hi All, I have question for you. We have analyzed our log and seems there is something that is not properly correlated. Here below a little explanation regarding parameters mentioned: ------------------------------------------ Receive TimeTime the log was received at the management planeGenerate TimeTime the log was generated on the dataplaneT...
how to turn off the daylight saving time in PA 7.0.3 ?
Hi, I have created tap zone and created policy under security policies .In my ddos profile there are two policies one for trust zone another one for untrust zone if I create another policy for tapzone , is it a good creating another ddos policies for tap zone if yes how can i do that ? Thanks
I am looking to supress any commit logs going to an external syslog server. I am currently only forwarding medium/high/critical. Thanks
Hi, whats new with 0.9.7 ? just noticed that Minemeld has been upgraded to 0.9.7 roughly 3 days ago. Thanks
I was just able to install 'hexatech' free vpn from the Apple App store and with a couple of clicks COMPLETELY bypassed my Palo Alto firewall! This program uses a variety of random IPs. It seems to like port 9010, though it uses others. Short of enabling decryption on my firewall, what are my options?
