Just starting a thread for CVE-2015-0235. GhostAnybody see any news from PA on this? I have not.Cheers
how can check dhcp packet on PA , for example using tcpdump -i Internal port 67 we see on unix/linux boxes.how can we check same dhcp request and response packet on PA .
I am testing the ability to block teamviewer on my network. I have a rule that should block the application. In the traffic monitor, I can see the denies for "Teamviewer-base", but it does not prevent the application for being "ready to connect", nor does it prevent me from connecting to this PC remotely. Any ideas or thoughts?
Hi,The PA seems not to output a URL log when HTTP response code "HTTP/1.1 204 No Content".On the traffic logs, the PA could classified the category of HTTP.But there is no log related with the same Session ID.According to the pcaps on the client PC,the browser requested HTTP GET, but the server replied "HTTP/1.1 204".You can see the same issue o...
Is anyone using MACsec and do you know if PA supports the security tags?Thanks
FYI - Having major issues with last night's content update. Inspection of traffic from our client environment to our domain controllers is causing significant logon/logoff delays. I changed from an app rule to a traditional port/service rule (as app updates have broken things in my environment often) and that made no difference. I reverted to...
Hello,Is this possible and is there some documentation show this?Thanks!!!!
I frequently come across threat notifications where the info in the Threat DB is so sparse as to make the notification useless.Take for example my threatid du jour, 13742."This signature detects NUCLEAR.Gen Command and Control Traffic."That's it. Try googling around to see what this is all about.How do you go about filling in the missing blanks ...
how to delete save configuration in palo alto before commit.Monitor--Configuration --tap showing some changes. i would like to delete changes..do not want to commit.
Hello,I have a cluster firewalls Model PA-3020, PAN-OS 5.0.1. FW1 active/ FW2 passive. I have already activated the license in the active FW1 over the Internet without any problems.How to active License a Palo Alto passive Firewall without Internet?ThanksDiego C.
Apple userid is not getting sent from the PA UserID agent to the PA500. Since the Aruba Clearpass device is seeing all of that info and more I found a doc that would allow the Clearpass to send that data to PA. Has anyone out there used this method?
Any advice for managing multiple GlobalProtect connection profiles? My colleagues and I connect to several different sites and haven't found a great way to track the client info for each site outside of a spreadsheet or password manager.
Hi Guys,All this one year, I have configuring the User-ID agent for ADs but never encountered a situation where the User-ID agent has to be configured for e-Directory. I am pretty much sure that it would be straight forward and similiar to configuring it on the AD and the agent has a seperate section for e-Directory; but it would great if any o...
We're on 5.0.15. Can't say it does anything wrong but there's always a point at which you feel compelled to upgrade.My rule of thumb has always been wait until the .07 release of any new PAN-OS - seems to be about when they're considered stable.So would anyone expect any significant issues moving from 5.0.15 to 6.0.8?My main interest is DNS Sin...
Hi Friends,how we can disable SSL V.3 only for management console on PA firewall.RegardsSatish
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 2 | |
| 2 | |
| 2 |
