General Topics

No traffic logs in PA-VM

I just deployed a PAN-VM and everything is working except I don't have any traffic logs for some reason but I do have ACC, System and Conguration logs. The only thing I can think that may cause issues is the fact that the box is not licensed yet as I

Antivirus-1470-1943

Our 3020 PA got updated with new AV definition this morning. Since then it is marking all Flash as Virus/Win32.generic and dropping it for all users. But we are not getting any complains from end users. We tried some sites with flash content and had

CVE-2015-0310

Model# of the device: PA-5020

Serial# of the device: 0011C103358

Current PANOS version: 5.0.4

Customer requires information that whether CVE-2015-0310 will have an impact on the PANOS version or not and if yes then is there any patch available?

An

DNS Spyware Vulnerabilities - Why aren't the FQDNs in Malware Category?

Today I switched on the "strict" Spyware anti-spyware policy on my outbound Domain Controller DNS policy - I'm seeing a lot (I mean a lot) of requests blocked for things like advertising networks.

Here are 3 DNS queries that were blocked, and they're

URL Logging - Best Practises?

What's the recommendation on the best way to configure a Palo Alto to log URLs visited during regular browsing?

We have various categories set to block which are of course logged but I've never quite got my head around the logic of setting something t

6.1.1 performance issues?

Has anyone encountered any throughput issues with 6.1.1? I have NOT had any issues until Friday.

Installed a PAN200 in vwire mode for a client eval / AVR. Their throughput to the internet was 44mbps before PAN. Through the PAN, it as cut down to 8mbps

Is User-ID Agent Appv5 compatibility with PAN-OS V6?

We have a new PA-3020 running on version 6 and I'm using our old Windows User-ID agent running on version 5 that are currently operational in our environment. I've configured PA-3020 to connect with the User-ID agent but I'm having an authentication

Global Protect Gateway License

Just a question about Global Protect Gateway License. Currently we're planning to deploy PA-5050 for our Data Center Infrastructure. Is Global Protect Gateway License is a requirement? For what I've understand, this is only a requirement if you're go

PAN2050 data stops when global protect client downloaded

Has anyone seen this issue? We have had this issue for months with no relief and am at my wits end. Forgive me if my frustration comes through......

what happens is this:

A remote user will login to VPN web page and click the link to download the GP cl

OSPF over VPN

Hello,

is it necessary to use Numbered Tunnel-IP confuguration when running OSPF over a VPN line?

Roman