General Topics

How do I create a browsing report thats easy for a CEO to read...

Hi,I have been tasked with creating a report out of our Palo Alto firewall that shows the following.For a period of 1 monthUsers Hours\Sessions on a websiteTop 20 visited websites.Top 20 Categories.We are using the user agent so all the data should be there, I can see some of it but getting this into a format that easy to read for a CEO?Can some...

Trouble differentiating between malware already seen by WildFire and malware 'first seen' by WildFire

I'm having trouble determining which malware has already been seen by WildFire (therefore it was not re-sent for analysis and blocked by the FW) vs. a file that our organization sent to WF and was determined to be malicious after analysis (not seen before by WF) . This would significantly help our organization respond to malicious files that may...

Resolved! Custom Button on URL Continue Response Page

Is it possible to create a custom button for the URL Continue Response Page? My customer is complaining that the Continue button that is part of the pan_form is too small and would like to create a larger one to use.

Polycom can not answers a call

hi all.i have a problem with palo altl and polycom.When i make a call from inside to outside >> it okwhen a call from outside comming >> i can not answersi open all port, allow all application as: h.323, h.252, rtp...pls help me know why

Import ssh key

Is there a way to import an ssh key into a firewall?For instance, I run the following commands:ssh-keygen -t rsa (The public key is now located in /home/demo/.ssh/id_rsa.pub The private key (identification) is now located in /home/demo/.ssh/id_rsa)ssh-copy-id user@myfirewallWhen I run the ssh-copy-id command, I asks me to login and I get this:Un...

QoS Guaranteed

Hi, I would like to book (guaranteed egress) 5Mbps for streaming in one of my vlan. My outide-Internet (egress) interface is eth1/1. The class for streaming is CLASS 1 (real time) right????whats the difference between "clear text traffic" and "tunneled traffic"??? Im using a PA2020, i can do QoS for limited bandwith and guarranteed in this model...

Resolved! ISP Failover Email Alert

Recently we configured ISP failover on two PA500s using PBF for the primary ISP and the virtual router for the backup ISP. We would like to setup some kind of email notification, or alert when this failover occurs. I've looked through the Admin Guide to try to figure out the best solution and the forums and haven't found a solution yet. What wou...

How to configure PAN to Azure VPN tunnel

I'm sure I'm not the first one to do this, but since I wasn't able to find a document on how exactly to do it, I figured I'd contribute one. I'd appreciate any corrections or optimizations.The Azure side documentation is pretty clear online and honestly there aren't many options available to configure. But here are is my Azure address space for ...

GlobalProtect Pre-Logon with Windows 8.1

I have been testing out a new GP portal/gateway on my firewalls for Pre-Logon/Always On as I would like to eventually like to move all remote workstations to this model. With that said, I notice when I enabled the pre-logon and SSO a new icon shows up on the logon screen which is confusing my users. Some click on it when logging in and others ...

Resolved! Monitoring Accessed URL's

Hi Everyone,We have the URL filtering license, I am trying to log all websites that a user access, however, I noticed PA only logs websites which the user fails to access due to a URL filtering policy, ie only websites that are blocked from the user because they fall under a blocked category.Is there a way to log user access to all URL's.Thanks

Resolved! Destination NAT of ESP and GRE

Hi all,I'm hoping somebody might be able to help with this unusual scenario please?I have been tasked with replacing an old linux based firewall with a PA-500 device.Initially the configuration of the PA-500 should just replicate what the current firewall is doing before we start phasing in the additional security capabilities of the Palo.The on...

Set time in report email scheduler

Hi,I think it´s a problem that we are not allowed to decide the time a report should be sent. According to support it´s automatically set at 2:am to releive the box of this burden during normal office hours. How Plao Alto knows every customer and their working hours is a mystery to me. And when trying to troubleshoot report delivery this becomes...

Resolved! Global Protect 2.3.1 and Windows 10 support

HelloI try to check it in pdf https://downloads.paloaltonetworks.com/software/GlobalProtect-Agent-2.3.1-RN.pdf?__gda__=1438918935_ba8887ff43fdf2364df6…but there isn't such information Could someone tell me that Windows 10 is supported ?If this info is nessesary I'm on 6.1.4 and GP 2.3.0.RegardsSlawek

What is the best PANOS version to PA 5020 & 5050 Plantforms

Hello Community,I have 37 PA Firewalls.9: 5020 Current version PANOS 6.1.428: 5050 Current Version PANOS 6.0.4 Reading the security advisories the 5050 devises must be with PANOS 6.0.8 and the 5020 with PANOS 6.1.4. But I would like to know, which PANOS version might to upgrade these devices without affect the running configuration?I apprec...

Resolved! Automated Correlation Engine - Will it look at log entries from before the upgrade to PAN-OS 7?

I have logs going to Panorama from Firewalls running PAN-OS 6.1.5, I recently upgraded Panorama from 6.1.5 to 7.0.1. Does anyone know if it will look at the old log events in the correlation engine or if it will only look at new ones coming in?Any way to test and confirm that the automated correlation engine is working?

Discussions

How do I create a browsing report thats easy for a CEO to read...

Trouble differentiating between malware already seen by WildFire and malware 'first seen' by WildFire

Resolved! Custom Button on URL Continue Response Page

Polycom can not answers a call

Import ssh key