General Topics

Find out more information from a listed Threat Protection

Hey all,

Love Palo Alto Networks!! Wooo!

Anyway, just wanted to know something, when I go into ACC (Application Command Center) under Threat Protection... and I get something like this...

Nice to know I was protect from a possible Virus, but what is Win

Globabprotect on demand mode

I have configured the GP agent to be on demand mode so you have to manually have to login in and it won't automatically log you in. But the client on my machine is still trying to login in automatically, is there another setting that has to be change

Threat prevention subscription

Is anyone using the threat prevention subscription and how are they configuring it?  I know that there are things I want to block but currently I have only set it to alert. What is the best way to configure the security profiles to get the best resul

Custom report

Is it possible to create a report that shows the threat and what specific machine is being infected or attacked?  We want to be able to use the PA and the reports to track down where the machine/pc or server so that we can remove/fix it

Can Palo Alto firewall prevent/intercept this JS in Github DDoS event?

Dear Sirs,

On March 26 the Github has been attacked by a five-days DDoS. Many people pointed out that an javascript infected from China was very suspicious because it would connect to Github per 2 seconds. University of Toronto’s Canada Centre and Cit

PA-200 restarting issue

Hello Friends,

Palo-alto device that device suddenly got reboot. please suggest

PAN OS :- 6.0.4

Server monitoring - active directory connection - error

I have 2 domain controllers: one is a 2003 server 32 bit, the other is an exchange server 2003 64 bit.

I've updated my PA 500 from 5.0.7 to 6.0.9

Now I'm experiencing an authentication issue on the 2003 server 32 bit.

On user identification, user mappin

URL categorization reasoning?

Someone shared a link with me to a new startup company and I found it had been blocked and listed as malware by a PAN FW --  I am curious if there is a way to determine exactly what occurred that made that site categorized as malware -- and how I can

Higher gainer low threat

If you have an app that is being seen a lot in the logs but has a low rating and is skewing you results is it possible to exclude it from the threat prevention analysis?

Limit internet traffic in PA-2050

Hi,

Can i limit the out internet traffic in PA-2050???

Thanks

Is there a way to automate reporting of "auth-fail" system log messages?

Hi,

I'm looking for a way to automatically/proactively report on auth-fail system log messages and not finding anything obvious. Some things I've tried;

1. I can send email under log-settings -> system -> informational, but a bit too chatty with all th

Using Virtual-Wire to isolate and allow/deny traffic to a couple hosts on existing subnet.

We have a situation as a result of going through a PCI audit. We have a single subnet which contains a handful of servers that need to be isolated and traffic restricted. Originally we were going to move these few servers to a new switch VLAN changin