Except Specific IPs from port scan detection / Zone Protection

I have a highly regulated environment with multiple internal security zones. We need to be able to run our vulnerability scanning solution against servers in separate zones on a routine basis.

It was simple to exempt the scanner's IP from the Threat P

NAT DIPP fallbacks

Hi there

Im seeing  NAT DIPP fallbacks quite a lot relating to a NAT rule, theres does not appear anything not working so im wondering if its somehting that im not noticing work.  Ocasionally it feels more sluggish that it should when browsing web pag

Runtime bandwidth shows more than maximum egress

Hi ,

Runtime bandwidth shows more than maximum egress value ? . What could be the reason 

Thanks

SQLinjection not being detected by PA

Hi, we are receiving these tries about SQL injection but our Palo alto is not detecting it. How can we do that PA detect this SQLi????? we have updated the threats signatures.

Sql injection

GET /ficha-modelo?id=2&entidad=99999999%27%20oR%20%277%27=%27

Active/Active L3 problem with asymmetric routing and NAT

I'm stumped.  I've looked through as many pieces of documentation and discussions as I can find and I think I have everything set up correctly, but it's only half working.

What I have is two PA-5050s in Active/Active.  I have two routers on the outsi

Hybrid whitelist/blacklist Policy

I played around on our lab FW a bit but couldn't get this working. Here are my objectives:

- Create a "White List" custom URL category that allows only a handful of web sites. (Working with URL Filtering profile.)

- Log all permits (Working. I got this

Wildfire .ace archive support

Does Wildfire support the .ace filetype?  I've received messages that should have been filtered that have .ace payloads.  The message attachments are clearly malware based on virustotal.  The message bodies are classic phishing type attacks. I have a

Drop all packets

I added an exception to a spyware profile to drop all packets and it now says its dropping and allowing the packets how can that be?

Site to Site VPN Double NAT Issue

Hi,

We have a branch office connected via site to site vpn, plao alto firewalls at both locations.

Due to buiding works the office has been relocated to a shared building and we're having to use a third party's network connection. We've been provided w