Hi,on URL-filtering how can I allow a single URL (i.e. docs.google.com) and block all the others ? Thanks.
Hi, im checking my logs about AppID behaviour. i realised that in traffic https (withouth SSLdecypt policy configured) the PA is detecting facebook-base in SSL connection but with youtube for example is not detecting the app and it shows SSL. Why in a SSL session the PA detects Facebook and not youtube???? without SSLdecryot policy....thanks
Hello,We have a PA-3020 running 6.0.3. Basically we have iSCSI replication set up between two sites. When I pull up the traffic in the Monitor tab I see the picture below. Even though iSCSI traffic is defined in the Applications section I tried creating another app to identify it but still see the "unknown-tcp" traffic show up. Is there some...
I am curious what the general take of the recent Netflix announcement is with regard to our ability to control the traffic. Announcement here . I have an opinion as to whether it is necessary, but that is another subject altogether.It is clear there is only so much application ID that can occur if the data is encrypted, but can it be combined w...
Hi everybody,does everyone have this situation on your PA-FW on the ports 137, 139 and 445 with country's: CN, US, MY, IN ...We have a lot of outgoing traffic with this situation and find out, that the PaloAlto "User-ID Agent" is the causer.A lot of the external (outside) addresses are in case of "WebBot" - very curiosity.
Hello,I have a question.What on base are showed for "show all signatures" of exception menu in vulnerability?I knew installed threat version in FW show.But I guest it is not fact. Look at the following images.The above FW does not have threat signatures.All vulnerability signatures show me. Are hese signatures not real?Thanks,KC Lee
Hi there everyone,Has anyone experienced any issue getting the captive portal login page to be prompted for old Windows machines running Internet Explorer 6? I have a customer whose environment is currently using IE6 and a PAN firewall running PAN OS 5.0.6 and the captive portal page isn't being prompted for these machines. Or is there a browser...
Hi,The above screenshot I took from the Qos rules under Qos Statistics .The Name field (first column ) is empty . What does it mean .?Thanks
Dear PAN Discussion Forum,I come to you in dire need of assistance. There is a battle going on within my network realm. A battle that we are losing. Some of my people have been mislead by downloading the Torch Browser application, and are now infected!The Torch Browser. Sucks in my users with an edgy-cool looking website that shows its fun to us...
Hello To All,We've a PA-500 which is linked to the AD. The idea is to block Facebook for a group of users.The thing is when those users will be logged (login and password), the AD update the PA-500.To block facebook for those users, What should be done?-1- Create a group of users-2- Create a Policy which include those users and a Deny rule for f...
Hi, I have problems with Splti tuneling and Android devices using preinstalled VPN Android client. There is a workaround to solve it ? Regards, Jorge Goya.
Hi, we have to upgrade a cluster active/passive and a panorama of this cluster. which are the steps to do these upgrades???1)upgrade the cluster like usual and then upgrade Panorama???2) first update the Panorama and then the cluster????advices...thanksRegards,
Dear All,PaloAlto firewall is sending system alert saying "PAN-DB url filtering has expired" . But the i am using only "Bright cloud" url filtering license.Please suggest.RegardsSatish
Firewall device has two disk partitions:Partition 1 => 5.0.XPartition 2 => 5.0.Y (current active version)When you install now 6.0.X, it will overwrite 5.0.XSo after reboot Partition 1 will be active. Then you install the next update to 6.1.X, this will overwrite Partition 2.Partition 1 => 6.0.XPartition 2 => 6.1.X (active version aft...
I'm having a heck of a time getting prelogon working for global protect. I have spoke with both Palo Alto support, as well as a vendor that is a Palo Alto partner. Neither were really able to answer my questions.Here is what I have today. Two Palo Alto 3020's. One is on the west coast, and one on the east coast. I have the portal license on...
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
TomYoung
on:
FWs no longer forwarding logs to Panorama
| User | Likes Count |
|---|---|
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
