General Topics

Has anyone had an issue using FQDN for syslog server setup?

(active-secondary)> ping host any-splunkproxy1.acme.com

PING any-splunkproxy1.acme.com (172.17.64.24) 56(84) bytes of data.

64 bytes from 172.17.64.24: icmp_seq=1 ttl=60 time=0.603 ms

64 bytes from 172.17.64.24: icmp_seq=2 ttl=60 time=0.565 ms

64 bytes f

Global Protect Client not asking for passwort

Hi there,

we're piloting the GP Client with a few people. Some of them are asked for credentials when connecting (expected behaviour) and some people are not asked for their credentials, but connected successful (not expected).

We definitely haven't tu

IPSEC association process in PA

Could someone please help me undersand IPSEC VPN association and message we can see during negotation.

Thanks for help.

Doubt about combining actions - File Blocking

Hi,

Is it correct this profile "file blocking"?

Name: BlockDownEXEFiles

-Block files with extensions * .EXE

-And prompts you before continue downloading files * .ZIP and MS Office

-The other extensions anything.

Thanks,

Use of No install check box when we add static routes under virtual router

Just to understand one thing what does checkbox no install means under static routes VR1

Special caracters for response pages

Hi, we would like to use our languages special caracters in our response pages. They are: ç, ñ, á

There is any way to put this caraters in html reponse pages???????

thanks

Let me know check MGT CRC

Hi everyone

I would like to check MGT CRC,,

I don't know how to do command line

show system state filter [??]

Allow mobile phone access by userid, is this possible?

Our techs often interface with Zenoss, and we have a mobile app that will let us view and interact with the alarms. The problem is we need to establish VPN access first. I also don't want to open the port for the world, and I can't allow a specific i

Object references - 'where used'

Hi all,

I'm new to the Palo Alto's, having cut my teeth on Stonesoft, Checkpoint and Sophos.

One nice feature in those solutions was the ability to select an object (of any type) and be able to list everywhere that it was being used - from policies to

User-ID for Cloudware

Hi Guys,

Just finding for options and thoughts to be honest...

We have a service called Cloudware which is almost like terminal servers.  What we are seeing is that users using a browser from these servers are not identified on the PAN as it is not cov

How to traffic-shape traffic over public wireless to app-stores like (app-id) apple-appstore?

Hi,

I'd like to implement qos traffic-shaping from our public wireless network to sites like apple's appstore or google's appstore.

When i look at the monitor screen of our palo, i only see ssl traffic. Do i need to decrypt the ssl traffic first so i c

SCP export log on PA-7050 and SCP import log on VM-100

Hi,

Anyone know if I can run a “scp export logdb” on a PA-7050 and then restore this logdb via a “scp import logdb” on a VM-100 ?

I understand that this would override all existing logs on the VM-100 but that’s fine, I just want to make sure this would