URL filtering

I am trying to elminate my ISA 2006 server and use url filtering. The setting to use the ISA server were applied using a GPO that sets the internet options/connections to user the proxy server. I modified the GPO and have confirmed that the internet

Virus Alerts

Is it possible to create email alerts for a virus type threat alert only?  With them set as medium i don't want all the medium threat alerts.

control_plane: exiting because service missed too many heartbeats,0,0x0

Hi,

We have alert "control_plane: exiting because service missed too many heartbeats,0,0x0" on system log.

It's bug from OS ? Now we used 4.0.11.

Thanks

Dd

Automatic logon with GlobalProtect when settings are set to "on-demand"

Some of our users are experiencing automatic logon, even if the GlobalProtect is configured with on-demand. In most cases this is just a minor inconvenience, but one of our portals are configured with two-factor authentication, and when they chose "d

Cryptowall 2.0?

Starting to see Cryptowall 2.0 infections  anyone heard any updates from PA  on a threat update for this?   based on my google search it's been in the wild for a week or so.

HA failover time

Hello,

How many time does failover take in seconds (when it happen)?, I have an Active/Passive deployment and I hope to use 5050 platform

I've noticed an incomplate request to 111.111.111.111

Hi Guys,

On PAN's Monitor tab i've noticed that one of our hosts(user's computers) send periodically some packets to 111.111.111.111 and receive any packets.on Application tab it stays incomplete!what is the shit?Did anyone have the problem like this?

Is there a similar service like IP SLA so the firewall can change default routes as a result of a certain condition

I was just curious...if I have 2 internet feeds but am not peering - I use ip/SLA to guanratee service.  If a ping to 4.2.2.2 fails, it drops the current default route and the other default route with the higher AD is the active default route.

Is ther

DNS not DNS? Strange UDP 53?

I am seeing a huge amount of traffic outbound from my DNS server that seems to be being dropped by the firewall. Its being dropped because my application rule says "allow DNS server to talk DNS to the internet", it doesn't match that (because its not

Inconsistent documentation on zone protection

Hello,

Palo Alto's documentation is inconsistent on the behavior of flood protection when it is applied by a zone protection policy.

1) "Threat Prevention Deployment Tech Note - Version 2.0 RevA", page 44 says that the zone protection based flood prote

Pa VPN IPsec

Hi,

i have a question regarding the VPN IPsec on Paloalto , is palotlo must be in front end when configuring the PA

Regards,

Sarah