Are DMZs still necessary?

We are running a PA-500.  Given it's abilities I am wondering if a DMZ is absolutely necessary.  Note:  I realize this is a wide open question, what servers are we using, what operating system, etc.  I am curious in more of a "general" sense.

There ar

Decryption rule blocking traffic silently

I am running PanOS 6.0.3. I have a decryption rule that perfectly works most of the time. However I realized that in some specific situation it silently blocks the traffic. As I am quite new on Palo Alto, I do not know if I am misunderstanding someth

PPPoE in A/P configuration

Hi,

Just checking this will work:

users---[switch]---[a/p ha pa500's]---[switch]---ntu

So the service provider requires a PPPoE client to use the link.  The SP only allows one port on the NTU to be used and only supports a single PPPoE session.

Can the P

send alerts when large files uploaded

Hi all,

   Please help to config in PAN devices a rule to send alerts to admin when large files, say geq 100Mb, are uploaded to Internet.

Thank you.

IKE 500

Here is some traffic being sent from my DMZ to the internet and I am trying to determine whats happening. How would the community read this information

Session          192980

        c2s flow:
                source:      172.17.1.5 [DR-DMZ]
           

Fragroute Evasion Attack - how to find source process/application?

Hello

Last days one of my computer started generating strange  traffic that is blocked by Thread Prevention (ID35111)

I have access to this computer, but how to find and remove this program that is genrating such traffic?

Regards

Slawek

URL Filtering Log show Action block-url

my palo alto I see url-filtering log

---in columns action show block-url

---in columns rule not show

and I don't add url-filtering profile to all security rule

why url-filtering show action block-url

help me pls.

PA5020 PanOS5.0.12

PAN-DB

Default threat ID correlation for action

Hi all,

I was searching for a while and could not find the answer to this question.

By default, does a Palo Alto block every instance a threat ID (that is enabled) is seen or does it wait until 1 threat ID hits 5 times in 1 minute (for example).

I would

Xbox Live with dynamic public IP

I know that this topic has been discussed before, but I cannot seem to find an exact scenario match since I am dealing with a dynamic public IP address.

Interfaces

ethernet1/1

• Primary internal network
• Default virtual router
• 172.16.50.1/24
• Zone: Internal

eth

forward connectivity

Hi friends,

How to forward connectivity  when our VPN connectivity down or leasedline down.

Regards

Satish