General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

POODLE BITES (and other Informational Vulnerabilities )

Just wanted to gauge what others are doing with regards to this particular vulnerability if anything. Historically this has been set to reset-both on this vulnerability. Which, by and large doesn't seem to cause that much of a problem on most sites, but I suppose the question I was asking is, is this something I should be blocking/resetting, o...

JRussell by L3 Networker
  • 4237 Views
  • 4 replies
  • 0 Likes

Resolved! USER-ID debug logs

Hi, I saw several articles which describe agentless user-id debugging and all show different ways (commands and output files), so I'm not sure which way is right and how to debug and see user login, logout and group mapping process for agentless user-id...I'll be very appreciate if someone share this information!

Tician by L3 Networker
  • 13572 Views
  • 1 replies
  • 1 Likes

Resolved! URL Filtering and CRL Download

We have PA Zone for which we have a very restrcitive URL filter , i.e. lots of categorys are blocked. The issue is that when a user in that zone goes to the SSL encrypted site and the browser tries to download the CRL for the SSL certificate it gets blocked becsue the CRL link either falls into Computer and Internet Info or Web Hosting, both ...

RC-BHF by L2 Linker
  • 2792 Views
  • 1 replies
  • 0 Likes

ChromeBook and Filtering on External Networks

I'm asking this from a perspective a a school district. Chrome devices (specifically ChromeBooks) have skyrocketed in numbers over the past couple of years. I was hoping to see development of the GlobalProtect client to encompass the ChromeBook (ChromeOS) platform. I guess what I'm asking for is an update to the previously asked thread: http...

P429-T by L1 Bithead
  • 4490 Views
  • 4 replies
  • 0 Likes

Resolved! How the interface may answer ping in this situation?

Hello for all. I had a problem that I resolved. But, I am posting because I could have solved of the best form. I have three links of internet. I have the firewall PA-200. These links are connected on three interfaces and the fourth interface is connected on my corporate network. The schema of links of internet is simple. This is controlled by P...

Bruce2 by L0 Member
  • 3109 Views
  • 2 replies
  • 1 Likes

Can PANOS support to export logs via API XML[through scp or ftp export log traffic]

Hello. My customer desire to export logs[traffic, threat, etc] via API XML The customer want that there is server which is requested to FW via API to get CSV File,,, he has already known how to export logs via CLI[SCP, FTP, TFTP] tftp export log traffic start-time equal ... like this I haven't found it yet.. Is anybody who can help me?

John_Lee by L2 Linker
  • 2943 Views
  • 2 replies
  • 0 Likes

How to architect Virtual PANs with AWS ELBs

We're at the initial stages of architecting our AWS environment and are considering using PANs to secure North/South traffic. The problem I am running into is the network design of how to get traffic to flow through the virtual PANs from the internet on their way to the front end web servers. The difficulty we're having is ELBs (Elastic Load Bal...

jjavier by L0 Member
  • 5013 Views
  • 2 replies
  • 0 Likes

Captive portal and url filtering .

Does captive portal work with url filtering. Getting all sorts of issues with captive portal .I works intermittently. running 6.1.7 spent lot of time with palo alto tech.

Integrating Panorama with existing PAN Firewalls?

I've inherited an environment where Panorama was an afterthought for 60+ PAN firewalls. Finally convinced management to buy Panorama after we terminated the reason for this mess and had to change passwords on 60+ firewalls individually. The problem I'm running into is that almost every firewall has different polcies, objects, network profiles...

Published MS subnet as unknown category

Hello, how can a subnet published there: http://www.cgoosen.com/latest-office-365-ip-address-changes/ can end up "unknown" ? 132.245.193.37 got blocked, no more Skype video calls (ouch). Thanks for adding all networks listed at the above URL to computer-and-internet-info.

Chromebook and GlobalProtect VPN

Does anyone know if the Chrome book supports the GlobalProtect VPN client? I have some staff interested in purchasing them but VPN access will be required and I have no way to test it.Thank you,

parkerbc by Not applicable
  • 4913 Views
  • 2 replies
  • 0 Likes

Redirects for YouTube with Safe Search Enforcement

I have been working to enable Safe Search Enforcement for all of our users, but was having issues due YouTube being blocked. Since I couldn't find a solution anywhere else, I created a bit of code to update the user's cookies to put YouTube into Restricted Mode and send them along their way - basically with the following code: var expiration...

edavis33 by L1 Bithead
  • 3890 Views
  • 2 replies
  • 0 Likes

Blocking Facebook-Video

I've found two past posts on this topic, but nothing really only these lines. *I've recently opened a ticket on this but was curious if anyone else has had this problem or been successful at doing so* Has anyone actually been successful in blocking just "Facebook Videos" with every other functionality working using only the Facebook-Video ap...

Static Route ECMP Monitoring upstream

Hi All, Probably a quick question. I am attempting to implement ECMP with two static routes. Such as: ECMP on e1/1 = 192.168.255.9/29 route 10.0.0.0 255.255.255.0 192.168.255.11 route 10.0.0.0 255.255.255.0 192.168.255.12 My question is, if 192.168.255.11 is unavailble, will the PAN remove that route as a vaiable route? Or do I have to us...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
Labels