General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Manage policies using CLI from a computer

Hi,

We need to programmatically toggle our PA500's GUI setting "Policies / Captive Portal / My_CP_Policy / Action" between "no-captive-portal" and "web-form" from a windows server.

I assume that this is possible using CLI remotely, but where can I fin

...

Using Netflow v9 in a Active/Active cluster

I configured a Netflow profile and associated it with a "Untrust" Interface on my active Machine in my setup.

I was surprised seeing that the second Active machine got this assotiation too. So I accume both machines are sending to the same receiver an

...

Terminal services agent issue with traffic dropping

Hi,

We currently let our TSA connect to our management interface. This is however causing problems in that in about 30 mins all traffic is dropped on the management interface. The GUI and CLI and such are time-outed then. To resolve this we need to re

...

Resolved! Pre-Logon Global Protect

Got the pre-logon function working ok.

The problem i have is that it doesn't seem to start quick enough to process login scripts etc.

For example when I log onto my network LAN using the laptop the drives are mapped and i get a pop up announcement mes

...

Grouping Countries

Hello,

I've been asked to block certain countries...

- All of Europe except Spain

- All of Asia (except Japan, Australia, Korea, Singapore, Taiwan)

- All of Africa

I figured I could add those countries to a "Denied Countries" group to use in a security po

...

Resolved! Public IP Behind PaloAlto

We have a /24 public IP network where some of the IPs will not NAT and some will NAT. For the scenario were there will be no NAT, the host behind the PaloAlto will have a public IP assigned to the NIC. Under what scenario would I break up the /24 i

...

Resolved! Is it possible to create reports or graphs displaying type and amount of transported data, sources and dests?

Where to start with this topic:

I can monitor the bandwith with SNMP and PRTG Network Monitor.

Now I'm interested in data >>>PA can provide <<< about types of data, sources and destinations?

I would like to check e.g. this:

How much VoIP is running throu

...

is it possible to forward clients with paloalto for websense ?

Hi all,

There is a topology like below.Clients using Cisco vpn and they are enforced to use some proxies(enforced from Active Directory)

There is a Local Websense but it cannot be used because of that enforcement.

Can Paloalto firewall decrypt that SSL

...

Can I make a virus security-profile excepted all w.generic signatrues?

Hello

My customer think all w.generic virus signarues would have false-positive.

So he want to make a virus profile excepted all w.generic signatures.

Can it be made?

Thanks.

Resolved! Failure to Delete a Certificate

PA-200

PAN 6.01

I imported a certificate, but failed to do something correctly. I wanted to delete the cert, and start over. When I select the certificate 'ServicesVPN' and click Delete I'm told ...

1- Failed to delete Certificate - ServicesVPN.

...

what is the maximum ignore list entries?

I am going to add a bunch of service acct into pan agnet 5.0.6 for pa FW to ignore the mapping.

but i wonder is there maximum entries of the ignore list file ?

Resolved! FTP Server: No Allow policy but 3-Way-Handshake and Username prompt possible?

There is no allow policy from Untrust to DMZ to contact the FTP Server.

There is an deny policy instead as a last policy between ZONE Untrust und ZONE DMZ.

But if I try to connect to FTP Server a connection is estabilished and my FTP Server asks for a

...

Resolved! Could I use a Asian 2 bytes charset on CLI when I configure?

Hello

I tried to configure on CLI using 2bytes Asian charset as below.

As you see below when I configure 2bytes Asiasn charset to description column and then PAN showed error message is Server error : Malformed Request.

So I questioned weather PAN could

...

Disable SSL - IPSEC only

Hi,

a quick one: is it possible to disable SSL VPN at GP? So users can only connect via IPSEC...

I know its possible to do it the other way but we like to have a IPSEC only portal/gateway.

Resolved! URL Filtering Category is "Unknown"

guys,

i have a problem in our Palo alto 5050, it shows a lot of URL websites with Category "unknown", although it shows the right category type on bright cloud website,

any help ??,

Regards,

General Topics

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free