Commit takes too much time

Hello I have a pair or 2 pan-2050 and it takes to much time to perform a commit, the last change made was incluiding a url in the white-list profileEnqueued ID Type Status Result Completed --------------------------------------------------------------------------2015/08/05 12:40:40 3533 Commit ...

ssl decryption does not work

Question about threat logs - Type wildfire-virus

Hi all, just wondering why I see in our threat logs entries with the type wildfire-virus only for the application smtp... (I would like to post some screenshots, but I cant find the upload button?) What is the type wildfire-virus standing for? And where can I enable it for other applications as well?

Sinkhole Feature Trouble

We implemented the DNS Sinkhole feature about the time 6.0 came out. I've actually had a hard time using the threat and traffic logs for incident response. We can't pinpoint which hosts are hitting what URLs or malicious domains. The threat logs show all the suspicious DNS queries that come from our DNS servers but not the hosts themselves (beca...

How Does DNS Sinkholing Work?

Can anybody offer a detailed explanation of how DNS Sinkholing works and possibly a real world example of it?I can only find this documenation: How to Configure DNS Sinkholing on PAN-OS 6.0 and it doesn't provide a lot of details on how it works.It seems like the DNS request is allowed but when traffic starts to flow the firewall notices the des...

Can't get syslog to work via data port

Hello folks, Maybe someone has seen this before. I've got my syslog profile, log forwarding and policy setup the way they should be configured but the only exception is that I'm using a data port and UDP 1514. I've configured a service route and also allowed the syslog server on my interface management profile. The connection between the firewal...

critical severity default action alert

I am trying to understand the meaning of the default critical vulnerability action "Alert". This question was brought up by management who gets the PAN Content Update email and I want to give them an accurate answer. For example, Adobe Flash Player Memory Corruption ID 38112 is rated as critical and, as most critical vulnerabilities, the default...

How do I create a browsing report thats easy for a CEO to read...

Hi,I have been tasked with creating a report out of our Palo Alto firewall that shows the following.For a period of 1 monthUsers Hours\Sessions on a websiteTop 20 visited websites.Top 20 Categories.We are using the user agent so all the data should be there, I can see some of it but getting this into a format that easy to read for a CEO?Can some...