The device model is 3020.From the output of >show system resources, we have found that the memory usage is 3781100kIs it alarming high memory usage?
Hi Guys,With a PA-3020, can I log the NTLM username of an authenticated HTTP request?The situation:PA firewall is located between end users and proxy serverProxy provides NTLM authenticationCan I log the username of each NTLM authentication requestThanks,Cheers,Mel
Hi Guys,I have a question about PA Daily Networks Report.On the last report we ran, the top five URL categories were the belowweb-advertisements 4,582proxy-avoidance-and-anonymizers 162unknown 70malware 65games 20Can anyone please help me to understand Web advertisements as the top URL - does PAN have an explanation for this category?Unknown - W...
Hi Guys,We have followed the below suggestion to block the Opera-Mini Browser applicationRe: Block internet access using Opera MiniHowever, during our test, although traffic log says its getting denied, but users can get to the first or second page on the porn websites and then it blocks.Is there any other ways to block this application complete...
Hello All,We recently contracted with a second ISP for redundancy. I have been looking for instructions on how to set this up, but have not had much luck. I did find the following articles, but none of them actually show how to completely set it up:How to Configure ISP Redundancy and Load Balancing This one comes close, but some important ste...
I have noticed that there isn't a lot of games listed in the application database. I really don't want to block a bunch of ports as they might be needed by something else, so I was wondering what is the best way to block certain Internet games? Specifically, I need to block Halo and Minecraft. Any suggestions would be greatly appreciated.Jon
All,We're currently using Captive Portal to present a terms page to our guest users which once they accept they're able to browse, etc. It's been asked if we can forcible redirect users to a particular URL once they accept our terms, but from what I can tell that doesn't really seem to be an option.So, is this a feature request, or am I missing ...
Hello All,I was read somewhere on this forum similar article from October 2014, and seem that problem with passive ftp was on new content ID. However some time passed since, I have issue with ftp passive mode on my VM-100 (panos 6.0.5, content ver. 483-2549..). I catch traffic with pcap on pan directly (all stages) and noticed that had drop stag...
I've tried without luck to add the URL 'addons.mozilla.org' to a whitelist. This URL falls under the 'shareware-and-freeware' category. This category is blocked. That's why I need to specify this explicitly in the whitelist. It just won't work. My monitor tab shows it is allowed for that traffic, but looking at logs for URL filtering, I see it b...
Vulnerability Coverage:Wildfire AV - WF 52532 (today) (PAN-OS 5.0+), and AV 1478 (tomorrow). Virus/Win32.CVE-2015-0313.a IPS Signature- Planning to release with 2/3 IPS signature releaseURLs associated with Malicious SWF samples:Malicious domains added to PAN-DB/malware already (PAN-OS 5.0 +) CnC/Spyware:Malicious DNS signatures added for domain...
Hi all, I'm hoping someone can assist. I can't enable the Forward Trust option for a cert that I generate using either a self-signed CA or 3rd party CA. The check is either greyed out or it's an option but doesn't keep the check after I hit OK. Any idea on how to get this working?Thanks!
Greetings all-I am trying to upgrade an ESM server from 3.1.2 to 3.1.3. When I run the installer, I get the below error message. I have ensured to run it as administrator. I have even tried disabling UAC, removing the AV agent and rebooting.Thoughts?
Hi,Does anyone know the network appliance could detect uni-directional link failure of SFP+ without UDLD?I tried the test with PA-5060 and Juniper-EX,but SFP+s kept link-up cause TX might continue to shot laser when RX came not to receive laser from peer.I though it is general problem as SFP+ and UDLD has been defined.But our customer said it co...
We are trying to let users to have read-only access to Facebook' but not allow them do posting or download anything from it. We don't have SSL policy. Can you block Facebook posting with you SSL policy decrypt traffic?Thank you
Hello,PAN-OS 5.08I have a security police to which applied a URL filtering Profile.I have blocked the category "social-networking" and I need to allow "twitter.com"I tried putting the URL in allow List: *.twitter.com *.twitter.com/*www.twitter.comBut it does not work.I have also tried creating a Custom URL Category but neither works.How can I do...
OtakarKlier
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
OtakarKlier
on:
Network wifi Management
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 7 | |
| 7 | |
| 6 | |
| 4 | |
| 2 |
