General Topics

Experience with PANOS 6 so far ?

I installed PANOS 6 on our Lab Box. Upgraded from 5.0.9. No problems so far.

Anyone else ?

malware??

Dumb question perhaps, but why is www.googletagservices.com/tag/js/gpt.js being flagged as a malicious URL?  It doesn't come up that way in PA's URL filtering site.

It's created a considerable jump in my botnet list.

Thanks in advance...

//moe

Wildfire Signature Based Blocks

Hopefully a quick question - is there any way to determine whether a executable has been blocked because it was a Wildfire derived signature (for paying customers).  It may be obvious when it happens, but hard to know if it has etc.

Would like to be a

Site-2-Site IPSEC Tunnel won't come online

i have three offices:

office 1: US - northeast    1.1.1.1  PAN-500HA

Office 2: US - southeast   2.2.2.2 PAN-3020HA  HQ site

Office 3: Shanghai China  3.3.3.3 PAN-200

all three IPSEC tunnels were up and running.  My Office 3 moved locations and when they

Using Netflow v9 in a Active/Active cluster

I configured a Netflow profile and associated it with a "Untrust" Interface on my active Machine in my setup.

I was surprised seeing that the second Active machine got this assotiation too. So I accume both machines are sending to the same receiver an

Terminal services agent issue with traffic dropping

Hi,

We currently let our TSA connect to our management interface. This is however causing problems in that in about 30 mins all traffic is dropped on the management interface. The GUI and CLI and such are time-outed then. To resolve this we need to re

Grouping Countries

Hello,

I've been asked to block certain countries...

- All of Europe except Spain

- All of Asia (except Japan, Australia, Korea, Singapore, Taiwan)

- All of Africa

I figured I could add those countries to a "Denied Countries" group to use in a security po

is it possible to forward clients with paloalto for websense ?

Hi all,

There is a topology like below.Clients using Cisco vpn and they are enforced to use some proxies(enforced from Active Directory)

There is a Local Websense but it cannot be used because of that enforcement.

Can Paloalto firewall decrypt that SSL

Can I make a virus security-profile excepted all w.generic signatrues?

Hello

My customer think all w.generic virus signarues would have false-positive.

So he want to make a virus profile excepted all w.generic signatures.

Can it be made?

Thanks.

what is the maximum ignore list entries?

I am going to add a bunch of service acct into pan agnet 5.0.6 for pa FW to ignore the mapping.

but i wonder is there maximum entries of the ignore list file ?