What is the difference between transaction and session on the signature scope of custome application?
Hi, Since yesterday, I saw a big increase in the use of the Ultrasurf application. Actually, it went from 0 to 200k sessions per day. Is anyone else seeing this kind of increase? I noticed they modified that application in the last content update. Maybe PAN made a mistake somewhere? Thank you, Benjamin
Q. our auditor scanned our firewall IP from outside network but we unable to identify and check the attack and threat on firewall ip but able to check on servers public IP in threat option. can any1 suggest where we can check in paloalto?
Hi all Does anyone already have installed 6.1.8 and tested? Are there any new issues? What I can tell so far is ... ... some sites with supported ciphersuites and TLS versions which did not work in 6.1.7 are working now ... websites with ECDHE/DHE Ciphers are working now respectively are not decrypted anymore when no decryption profile is appl...
In this set up, I'm trying to configure a site-to-site VPN between a PA and a Cisco 3G router (whose IP address will be dynamic). I'm unable to get the tunnel working. When I run the command 'show vpn ike-sa gateway <gatewayname>', I get no information about the tunnel. It doesn't even seem to know about the tunnel. Any ideas please?
Hi, Under monitoring , still disabled policy rules matching to some some session . And the session status are most of them 'incomplete' .Why ? Thanks
I have a perplexing problem with allowing DNS traffic from internal to the internet on our new PA-3020 running 7.0.3. We have 2 DNS servers in our datacentre on the same subnet that perform queries to a couple of external DNS servers provided by our telco. I have a rule allowing traffic from the 2 IP's (Internal Zone) for our DNS servers out...
Hi there, I have recently started wanting to setup using some Dynamic block lists in my PA box. I just wondered if others use these and if so, which sites do they use? I was inially looking at using these 2. www.spamhaus.org www.openbl.org Any others that you would suggest? Or even, if you have reason to not use the above 2 I would lov...
Is it possible to role out the latest GP client to only a small group of specific usernames? Also, if so, would it have to be one config per individual or can they actually be grouped?
Hi, I was wondering whether someone can provide me clarification on this feature. Palo states "You can now disable direct access to local networks so that users cannot send traffic to proxies or local resources while connected to a GlobalProtect VPN. For example, if a user establishes a GlobalProtect VPN tunnel while connected to a public h...
Hi, user registered sometime in UserID-Agent and sometime they dont, randomly...We have installe another UserID agent but the result its the same. we run show user ip-user-mapping all and we dont see any user, but if we run show user ip-user-mapping-mp all we see all the user. where the users should appear, in dataplane or management plane??? ...
Hey guys, Looking for some assistance on getting a strange issue resolved. I've got a site-to-site VPN set up for a connection to AWS for one of our customers. I've created two loopbacks, loopback.5 and loopback.6, on the outside zone that fall in the same subnet as our regular ethernet interface, which is a /29. I've verified that our peers I...
Hello~ The PA-5020 are using one disk. [size 120GB] My customer want to add one disk and RAID configuration and has another SSD [size 240GB] also model is different. I guess that PA-5000 Series support Raid as different model including I have never tried to test about that. Are there any who tried to do about that? I don't know how to proc...
Hi Everyone, My internal network (trust zone) operates at 1Gb speeds and the connectivity with ISP (untrust) is at 100Mb. I am in the process of setting up SIP QoS but am a little confused as to how I should manage the inconsistences between the ISP and internal network speeds and the "Maximum Egress" field for the "QoS Profile" section. Shoul...
Hello I am considering of turning off offload at PA due to packet capture. I read one of documents about session in comunnity site. web-browsing, ping are not offload.. so I don't need to do command line [offload no] If I want to do pcap to inspect detail logs about that Could you give me who has non offload applications lists? Thank you
PavelK
on:
Replacement of RMA
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 3 | |
| 2 | |
| 2 |
