General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Panorama Application and Antivirus discrepancy!

Currently our Panorama General Information window on the dashboard is showing the following:

Device Name: SA-PANMGMT1

Application version: 489-2600 (03/03/15)

Antivirus Version: 1503-1978 (03/10/15)

I change context to one of our two firewalls (both the

...

Site to site VPN with isa server firewall

Dear Friends,

I am facing some challenge, vpn configuration with ISA server firewall. Ph-1 is up but PH-2 is not. when i put the proxy id both side firewall external ip , both Ph is up. when i put the LAN segment like (local 172.30.30.0/24 remote 192.

...

The Check Point Advantage

3 years ago, we replaced Check Point firewalls with Palo Alto Networks.

Seems this was a huge mistake. We might have to go back …..

The Check Point Advantage

"Palo Alto Networks, a newcomer to security, falls short in their architecture and solutions"

A

...

Interface Names (for purposes of SNMP)

Is there any way to change the name or description of an interface in the device configuration? We use What's Up Gold to monitor most devices on our network- it walks SNMP and retrieves the default names just fine (mgmt, ha1, ethernet1/1, ethernet1/2

...

Resolved! LACP and HA pair

My tested design has been to LACP between the same LAG (i.e. AE0) on the PA primary and secondary units, to different LAG entries (ie. AE0, AE1) on the outside and inside equipment (Both Juniper). I have one device though (Juniper SRX) that has VPN

...

Resolved! Why can't the firewall present a Response Page on Non-Decrypted SSL Web sites?

I'm trying to understand why users can't get a URL Filtering Response Page when they go to SSL-based Web Sites that are not being decrypted by the firewall.

Thanks,

Jeff

template occurances / template used

Would it be possible using panorama to find out where we have mapped specific template , for example we have template for IKE cryo , can we track using panorama on how many firewalls we have mapped that.

Palo Alto Networks Content Updated email fail

That i just received April 7th lists all the other "Chris's" that subscribe to these updates in the CC field.

My teammates received the same with all other PAN users that shared their names.

With about 100 carefully selected names we could build almost

...

Resolved! In a traffic filter, can you make a statement of "not eq"?

Hi everyone,

I'm not too familiar with SQL or db querying, and I'm trying to create a filter on our PAN that looks for traffic that is denied, and NOT Equal to Bittorrent. Is this possible?

thanks,

/e

Resolved! How to make access for another router thru PA-500

I need to setup router from vendor with official ip adress because it cannot use nat. It will support a service from Miele called "Miele Logic".

Without setting this directly on modem wiith swith I want to sett this on interface at PA.

I have not figur

...

SSLMGR-cert-ocsp-verify-failed error

Hi Guys,

My client has configured LSVPN. The tunnel is up, but he is getting the sslmgr-cert-ocsp-verify-failed error message.

It said SSLMGR certificate ocsp verification failed. Certificate xx status is unavailable.

Has anyone experienced the same iss

...

Resolved! GUI not working with Internet Explorer 11

Has anyone been able to get the GUI to work on Internet Explorer 11?

Resolved! virtual system configuration

Hi,

when configuring a virtual system, is a restart is required

Regards,

Sarah

Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

Running GP 2.0.3-5 and the single sign on fails on windows 8 or 8.1 clients. Windows 7 works fine so I'm pretty sure I have the portal and gateway setup properly. I've opened a case with support but they're drawing blanks after three days.

Here's the

...

Rule shadowing

does that basically mean you have more than one rule doing the same thing?

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free