General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

Remote access to serial console - how to do it?

Hello

I know that we live in modern world, with smartphones dual ISP and HA and etc. but in some countries we have different reality

I'm looking for solution how to connect to serial console of PA firewalls remotelly using PSTN line.

The idea is to us

...

Resolved! PBF and failover

Hello all,

I had a question regarding PBF and how the failover works.

I have Internet circuit A and Internet circuit B, each through a different ISP. All traffic and VPN tunnels go through circuit A. I create a PBF rule to route web-browsing and ssl

...

YIK YAK

Due to Cyber-bullying issues we have blocked access to Yik-Yak over our Campus Wi-Fi network. The application filter worked for a few weeks but after a recent update to the yik yak app the filter is no longer functioning. I have had to resort to bloc

...

Anyone using iOS 8 and Globlal Protect?

Ever since our users started upgrading the iPads to iOS 8, we have been noticing that the Global Protect VPN connection gets disconnected rather quickly.

From my own experience, it looks like I get disconnected after a few minutes(judging by the Traff

...

What is the Query Builder Syntax to filter on a range of Source Address IPs when creating custom report from URL Log?

How do I create one filter for a range of IP addresses without having to create a filter for each individual IP? Anything I try comes up as invalid filter syntax. I am trying to use the 'in' operator to define an IP range or VLAN (i.e. - none of 192

...

Resolved! GlobalProtect client logging

Hello,

The GlobalProtect version we are using is 2.0.4 (the free single gateway version in on demand mode), the firewall is on 5.0.8. The problem I am hearing about is that some people are having trouble connecting, the icon spins and is not able to c

...

Resolved! PanOS 6.1.0 and Bash

I see what might be conflicting claims regarding Bash and its full remediation in 6.1.0.

Here I see that 6.1.0 is still vulnerable to bash based on the claims

Palo Alto Networks Product Vulnerability - Security Advisories

However, here I see that at l

...

URL filtering

I am trying to elminate my ISA 2006 server and use url filtering. The setting to use the ISA server were applied using a GPO that sets the internet options/connections to user the proxy server. I modified the GPO and have confirmed that the internet

...

Virus Alerts

Is it possible to create email alerts for a virus type threat alert only? With them set as medium i don't want all the medium threat alerts.

control_plane: exiting because service missed too many heartbeats,0,0x0

Hi,

We have alert "control_plane: exiting because service missed too many heartbeats,0,0x0" on system log.

It's bug from OS ? Now we used 4.0.11.

Thanks

Dd

Automatic logon with GlobalProtect when settings are set to "on-demand"

Some of our users are experiencing automatic logon, even if the GlobalProtect is configured with on-demand. In most cases this is just a minor inconvenience, but one of our portals are configured with two-factor authentication, and when they chose "d

...

Resolved! Email Links

I have been blocking the url category for web-based email per my company policy, but i am having issues with newsletters that have links.

For example this one I have.

An email comes in to view the upcoming items for sale.

here is the link

Healthy Sna

...

Cryptowall 2.0?

Starting to see Cryptowall 2.0 infections anyone heard any updates from PA on a threat update for this? based on my google search it's been in the wild for a week or so.

HA failover time

Hello,

How many time does failover take in seconds (when it happen)?, I have an Active/Passive deployment and I hope to use 5050 platform

Resolved! Skype-Probe Problem

Hi All,

It's again me, with my issues! :smileygrin:

I was asking for this issue once, but didn't find any solution.

So there were going Skype-probe requests to an XXXX.XXXX.XXXX.XXXX ip address with application(Skype-Probe).It took one week.Then when w

...

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

How and Why to Accept a Solution to Your Post