Hi,I would like to get rid of events created by specific Vulnerability signature. Is this possible somehow?Thank you for any suggestions!BR radek
Hi All,Looking at the Traps solution and wanted to know if the solution allows for a replacement of Antivirus or does it supplement one? I don't really want tot have to support multiple services and agents on all the devices so i was hoping for the former?
<190>Mar 31 08:52:56 XXXX-firewall-name 1,2015/03/31 08:52:55,001606005137,TRAFFIC,end,1,2015/03/31 08:52:55,source_ip,,destination_ip,trust-untrust-web-services,,,paloalto-wildfire-cloud,vsys1,trust,untrust,ethernet1/1,ethernet1/3,Log_Forward,2015/03/31 08:52:55,57030,1,42349,443,45974,443,0x400053,tcp,allow,2319,1200,1119,20,2015/03/31 0...
I'm working to identify a few categories and what they mean. I looked in the online help and all it did was list the categories. Is there a document that gives more information about what content filtering categories are for? Specifically i'm trying to find out the difference between unknown and not-resolved? How are they used in PA?
is there currently or are there plans for ACI integration?
Hey guys, we are upgrading our PA-5050s drives from a single 120GB SSD to two 240GB SSDs and I was wondering how long this will take? I assume it will be pretty quick since we are installing two identical fresh 240GB drives but I wasn't sure how long it takes to build the raid and bootup after this. I can't find much in the install docs and I am...
My HA widget on my Active/Passive cluster is showing that the Anti-Virus versions are mismatched but they aren't. Refreshing the widget doesn't help. The General Information widget on both 5020s is reporting correctly at version 1555-2030 (05/21/15) but hovering over the HA widget mismatch icon shows the passive firewall at at older revision (t...
I have a firewall running in layer-3 mode. I've got multiple separate virtual routers on the inside, there is no overlapping address space in any of these. I need all of these to share one outside internet connection. I'd like to do it without static routes (other than the main default to the outside).Right now I have the outside virtual rout...
I am trying to create different globalprotect access. so I want to give access by security groups. When I search for the Users group in AD to add security groups from that they do not show up and I don't know why.
A feature I would like to see in the future is a check mark to wipe a rule. Example: I have to setup rules that are good for a single time for particular users after which the rules is no longer necessary.It would be a nice option to be able to have the rule remove itself once the schedule has expired. ThanksBob
Hello I get this error message from the passive Firewall in HA Mode. I verify in "Service options" that the "management interface" is in use. From CLI I can reach "s0000.urlcloud.paloaltonetworks.com"ES2PA5050FW02(passive)> ping host s0000.urlcloud.paloaltonetworks.comPING s0000.urlcloud.paloaltonetworks.com (50.18.116.114) 56(84) bytes of da...
Hello,we are using Cisco VPN Clients to connect to our Palo Alto Network Device, it works like a charm, but the user are logged out after one hour.The timeout for Login Lifetime is set to 30 day, and the Idle Timeout is set to 8 hours.Any suggestion?Jörg
We recently purchase pa3020s for mainly application control reason and put them behind cisco ASAs. I set up trust-to -untrust policy which applies to outbound internet traffic. I denied unwanted apps and allowed rest using user group mapping. that is all working fine and users can access internet with no problem.. well, last week, I tried t...
I have the globalprotect client installed and working for pc's but I downloaded and installed the client on my android and it looks like it is trying to connect or is connecting then it pops up my username and password box again. I checked the traffic logs and the system logs on the PA and it says it authenticates successfully and there are no d...
I want to give different access permission to different group when they access the network using the globalprotect vpn client. I have it configured but its now allowing me to pick the specific group that I want the access for
PavelK
on:
Replacement of RMA
| Subject | Likes |
|---|---|
| 4 Likes | |
| 3 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 5 | |
| 3 | |
| 3 | |
| 2 |
