General Topics

Is anyone using the Aruba Clearpass device to identify user and machine name information?

Apple userid is not getting sent from the PA UserID agent to the PA500.  Since the Aruba Clearpass device is seeing all of that info and more I found a doc that would allow the Clearpass to send that data to PA.  Has anyone out there used this method

Managing Multiple Globalprotect Profiles

Any advice for managing multiple GlobalProtect connection profiles?  My colleagues and I connect to several different sites and haven't found a great way to track the client info for each site outside of a spreadsheet or password manager.

6.0.x - Stable?

We're on 5.0.15.  Can't say it does anything wrong but there's always a point at which you feel compelled to upgrade.

My rule of thumb has always been wait until the .07 release of any new PAN-OS - seems to be about when they're considered stable.

So w

How to determine memory in PA-500

We recently bought a PA500, and we've been annoyed at how slow it is to commit its config. We mentioned this to our SE the other day, and he explained that there was a memory upgrade available.

We're not sure if we have 1GB or 2GB of memory, and I'd l

No traffic logs in PA-VM

I just deployed a PAN-VM and everything is working except I don't have any traffic logs for some reason but I do have ACC, System and Conguration logs. The only thing I can think that may cause issues is the fact that the box is not licensed yet as I

Antivirus-1470-1943

Our 3020 PA got updated with new AV definition this morning. Since then it is marking all Flash as Virus/Win32.generic and dropping it for all users. But we are not getting any complains from end users. We tried some sites with flash content and had

CVE-2015-0310

Model# of the device: PA-5020

Serial# of the device: 0011C103358

Current PANOS version: 5.0.4

Customer requires information that whether CVE-2015-0310 will have an impact on the PANOS version or not and if yes then is there any patch available?

An

DNS Spyware Vulnerabilities - Why aren't the FQDNs in Malware Category?

Today I switched on the "strict" Spyware anti-spyware policy on my outbound Domain Controller DNS policy - I'm seeing a lot (I mean a lot) of requests blocked for things like advertising networks.

Here are 3 DNS queries that were blocked, and they're

URL Logging - Best Practises?

What's the recommendation on the best way to configure a Palo Alto to log URLs visited during regular browsing?

We have various categories set to block which are of course logged but I've never quite got my head around the logic of setting something t