NAT Rules Log / Highlight Unused Rules

Hi,

I'm doing maintenance and have doubts about a NAT rule.

I have enabled the "Highlight Unused Rules" and this rule seems to be that using currently. But we believe that this is not in use.

How can I see the activity related to a policy NAT?

How can I

Deploying Panorama M-100 in HA mode

I have purchased two (2) Panorama devices M-100 to be setup in HA-mode.

A couple of questions:

     a) There are two interfaces in the front. One for Management, but what is the second one (the one to the right) used for?

     b) The devices are "activ

Botnet Syslog

Hi guys,

I have a syslog that I make some monitoring dashboards and the customer want one view about all botnets in my network.

I had configured Palo Alto to send the logs to syslog. But I can't found the log about botnet.

Somewhere know how can I do t

GlobalProtect and Cisco IPCommunicator

Recently rolled out GP to our users. We have some that have issues using IPCommunicator while using GP. Anybody know of anything to help these users? They are able to ping TFTP servers.

Users are in UK - CallManager Cluster is in US (Wisconsin)

GUI "Authentication timed out"

Hi,

When I log on GUI shows me:

"Authentication timed out"

What I can do?

I can not access through SSH.

Regards,

Exchange Question

I feel this may be a dumb question, but I was hoping somebody could give me clarification.

We had some issues with users receiving malware or a virus through a separate email account (ex testcompany.com), them opening it, and then it would send the em

Netflow records with zero values for byte and packet counts

I'm running PanOS 5.0.11 on a 5060 and am looking at exporting netflow into SiLK.  In the SiLK logs, I'm seeing thousands of messages that look like this:

Oct  9 09:37:43 hostname rwflowpack[3470]: IGNORED|111.222.112.13|100.200.195.225|33775|6917|6|0

How to request Palo Alto to add the Certificates to the trusted CA?

Hi guys,

Our staff try to access on website https://webmail.spintel.net.au, but session 'aged out'. If we set that website to bypass decryption, it worked.

The certificate was issued by RapidSSL SHA256 CA- G3, but it is not on the trusted CA list. How

most stable panos 6?

Hi,

we're planning on upgrading from version 5.0.8 to version 6.x.x. Which version of panos 6 is the most stable?

Thanks.

Dynamic Update Issue?

Our library has a Millenium server, the application is millenium-ils.

It stopped communicating after APP+Threat  release 484 installed.

I rolled back to APP+Threat release 482 and it restored communication.

This morning APP+Threat  release 485 installed

Threat Prevention best practice ?

Hi Commuity,

I'm looking for your tips and hints regarding TP best practices.

(hopefully this newbee question is not too bad :smileyconfused:)

Let me explain our setup:

As a first step to a new IT Security Infrastructure we are running a HA-pair of PA-3