General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! url log without profile

Hi ,

Why do we see url filtering logs although there is no any url profile ?

logs related to denied app. like ultrasurf and hot-spot shield

Resolved! Knowing overlapping rules

Hi,

There is any way in PaloAlto to know the rules which are being overlapped in anothers?????

thanks

Employee Privacy in the Global Enterprise - SANS Reading Room

For those of you with global Palo deployments, here's a paper to get you started on what you should know about employee privacy issues. This issue can be complex in countries outside of the U.S.

"Next Generation Firewalls and Employee Privacy in the

...

Resolved! Possible Issues with 6.0.5-h3

Has anyone discovered any issues with H3? I have an odd issue and am not sure if it has to do with the layer 4 changes in the hotfix to address the evasion issues.

I have upgraded 3 client sites. No issues at 2 of the sites. On the third side, I have

...

Extended SSO Support for GlobalProtect Agents

Hi,

GP 2.1.0 is now released with the extended SSO support:

With Single Sign-On (SSO), the GlobalProtect agent wraps the user’s Windows login credentials to automatically authenticate and connect to the GlobalProtect portal and gateway. SSO has been e

...

Resolved! WAN interface connectivity loss logged anywhere?

Do the PaloAlto's have any functionality to monitor a wan link or tunnel and create a log entry if the link is down or there is significant packet loss? I am able to see these things through external monitoring tools but it would be nice to have a s

...

How to change IDLE TIMEOUT for special connections?

Database Server and Client are divided by 2 Palos.

Connections are timing out.

How to change the IDLE TIMEOUT for special clients/servers?

Roman

FTP Data - Handshake is not estabilished

Hello,

we are struggling with this problem.

There is a FTP Client and an FTP Server. Both on different sites. Between them is a VPN Tunnel build with PA 3020 and PA 5020.

FTP is working - but sometimes not!!!!!

We found the reason for this:

This is what

...

Resolved! Legit Suspicious DNS Query?

Since 2013/12/26 I have been seeing a large number of Suspicious DNS Queries (generic: xml12es.farolatino.com), threatid 4011926. After researching the computers that are getting this, they all seem to be going to Microsoft sites prior to this query

...

Set Up Data Port for external services

Hallo all,

I am following the document PAN OS 6.0 Admin Guide. Since my management port does not have internet access, I have to setup a data port for external access and updates. So the mentioned document, in the section called "Set Up Network Access

...

Resolved! syntaxt issue with user enumeration

Hello

I've an issue on the PANOS 6.0.3

about enumaration of user or group in a security policy

I have to use the complete ldap syntax to found the user in the user source column

like this

and when i tried to browse directly with the select menue

I obta

...

OT: SNMP Trap to SMS

Hello

I have question not directly connected to PA but I think here are peoples who using such solution or are interested in

I spend over a hour on googling for simple and free solution for recieving SNMP trap and sending alert by usb modem as a SMS

...

Resolved! Looking for Documentation

Hallo

i am looking for the following documentation. I searched the knowledge base but could not find any document:

1. IPSEC Configuration Guide with PAN OS 6.0

2. Configuring PA Firewall for Remote Access Management.

Could anyone give me an exact link wi

...

Configure Certificate Based Authentication for IKE: ISSUE Cert

Hi all,

I config IPSec betwen two PA device: 1 PA5020 and 1 PA

I config as guide: How to Configure Certificate Based Authentication for IKE on PAN-OS 6.0

I generate CA on PA 5020 and import to PA 200

But on PA 200 i can't sign new Cert with the imported

...

can we get the lost pre-shared key ?

Hi ,

i have a palo alto firewall, i have been asked to put together the pre-shared keys for our VPN peers.i am not able to locate the key for some tunnels, is there any way i can recover the key from my config ?

Regards,

~Harry

Discussions