General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Unable to view YouTube on HTTPS, for some people

For a long time we've had a rule that grants access to the youtube application (and its sub-applications) as well as the google-video-base application.  This rule grants access for people to watch YouTube videos if they are in a certain Active Direct

...

URL Filtering Time-Quotas

Hi,

We're planning to use the Palo URL filtering features to replace Websense.

Just wondering if it was possible within Palo to do any kind of URL filtering time-quotas?

For example, a user might be able to look at 'shopping' category sites for 60 minut

...

How to import Certificate using CLI?

Hello,

I'am trying to imort a certificat using CLI (set shared certificate AVF-ROOT-CA-2014 public-key command) but the device is only taking the first line of the public key. So i'am searching for the correct way to issue the command so that the CLI

...

eoop by L1 Bithead
  • 11664 Views
  • 1 replies
  • 1 Likes

GZIP File - Google Translate

Hi,

some users reported they are unable to use Google-Translate any more. I saw in the logs, Clients are trying to download GZIP files with the app google-translate-auto and google-translate-manual:

I'm sure, the users were able to use Google-Translate

...

Hithead by L4 Transporter
  • 6219 Views
  • 13 replies
  • 0 Likes

Resolved! Suspicious DNS Query list

Hello,

Is there a list of all the DNS Querys that PA considers suspicious?

I was considering changing the default action from alert to block for these signatures.

Since there is potentially 1 million URLs that will automatically get blocked when adjuste

...

Resolved! Virtual Wire deployment: vlan not crossing firewall

Greetings,

Soon I need to get our firewall off from tap mode into a virtual wire deployment. We'll be placing it between our router and core network switch, with no local secondary production subnets to worry about so virtual wire seems to be the tick

...

Netwerx by L2 Linker
  • 5425 Views
  • 5 replies
  • 0 Likes

Resolved! DoS Protection Logs

If you have a DoS policy setup with both an aggregate and a classified DoS profile to protect a webserver and you see flood logs in the Threat Tab.. is it possible to tell whether or not the flood matched on the aggregate or the classifed DoS profile

...

SDorsey by L4 Transporter
  • 6450 Views
  • 1 replies
  • 0 Likes

Resolved! PAN VM series throughput

Is the throughput on the PAN VM series an arbitrary cap set by the PAN software?

It seems that it certainly shouldn't be on the hardware side as one could do 10gb netorking, put it on SSD and throw as much ram/cpu at is as they desired. And I would t

...

SDorsey by L4 Transporter
  • 2873 Views
  • 2 replies
  • 0 Likes

mgmt appweb3[4591]: appweb3 error: : appweb3 ?

Hi,

My PA-2050 recently management cpu always high to 70%, and 100% when commit.

check the log as below,

appweb3 error: : appweb3: Error: Ignoring unknown directive "Action" At line 121 in /etc/appweb3/appweb.pan.conf  Make sure the required modules ar

...

ArcherY by L0 Member
  • 2146 Views
  • 1 replies
  • 0 Likes

SSL decryption feature

Hi All,

I wish to ask do i have to have my own Certificate in order to use SSL decryption feature, in order to decryption my users SSL traffic ?

OR i can just go and setup this feature and use it right away ?

I use PA-VM-100, PAN OS 6.0.4

Difficulties creating a secondary VPN tunnel

I'm having trouble authenticating with a second VPN tunnel that I've created.

I've created a new Portal and Gateway, almost identical to the previous ones. Obviously with it's own external IP, certificate that fits the given domain.
Created a new Zone

...

Disable SSLv3/TLSv1

Is it possible to disable SSLv3 and TLSv1 for Global Protect?

Vulnerability scanners flag the interface of the PAN where Global Protect portal/gateway are hosted as it allows these deprecated versions.

SDorsey by L4 Transporter
  • 2320 Views
  • 2 replies
  • 1 Likes
  • 23595 Posts
  • 103 Subscriptions
Top Solution Authors
Top Liked Authors
Labels