General Topics

How to use "Retrieve User Group" feature in RADIUS profile?

I would like to use my AD groups in Security rules (along with RADIUS and HTML Captive Portal). So far I managed to use "known users" only, seems due to a lack of Group attribute exchange between PAN and RADIUS (MS IAS 2003).I found the promising "Retrieve User Group" chekbox in RADIUS authentication profile settings but so far didn't find any r...

Frequent Running Of AddrObjRefresh Blocking Commits?

Hi!I'm new here, so will probably be asking lots of dumb questions ... but hopefully relatively interesting dumb questions. Currently running PANOS 6.0.7 on a pair of PA-5060s (active-passive). Not currently live (switchover day is 17th January), and we're considering upgrading to 6.1.1 next week. Recently (last few days) ran into an issue where...

Destination NAT translation is not working os .5.0.10

Hi Friends,PAN OS 5.0.10 is running. i have create a destination NAT translation but is not working and also i am not getting any logs. please suggest. RegardsSatish

Some basic understanding / about pushing commit

When we push commit to firewall does it interrupt traffic with dataplane , secondly how can we roll back last commitThanks for helping me understand.

Zone Protection /Host Sweep settings...

I tried to adjust the "Host sweep," according to my network traffic, but I don`t get the results that want:Inteval (sec) : ?Threshold (events) : ? Example: Given these threatsI made the following query to see the number of events in 10 seconds: ( addr.src in 172.16.29.111 ) and ( port.dst eq 161 ) and ( receive_time ...

WF-500 Appliance Registration

My WF-500 appliance is behind a firewall and is failing registration. What external access is required on my firewall to ensure the device is registered?I've allowed access to staticupdates.paloaltonetworks.com via 443 for software updates which is OK.Initially to pass registration I temporarily allowed the device to any external IP address on 4...

only educational videos allow

Hi Friends,I need your suggestions!! I want to allow only educational videos to play in my office through youtube but i am not able to get any solution. please suggest.RegardsSatish

Resolved! Report on Last Calendar Day IPSEC users

HelloI am new to the Palo Alto firewall and community. I really enjoy working with the PA-500's that I have. What I am trying to figure out though, is how, if even possible, I could create a report showing the previous day's IPSEC users. I am hoping that possibly someone who is more experienced will have some idea of how I could accomplish th...

Firewall is Responding to 02bf.ac10.0cbe ARP Request on the Network

Hi Friends,Firewall is Responding to MAC address ARP Request on the Network. please suggest.RegardsSatish

Clone URL Filtering failed

I want to clone an URL Filtering object, but this failed with: 1- Failed to clone "URL Filtering object". -> allow 'Custom URL Category' is not a valid referenceWhat's wrong?Model PA-3020Software version 5.0.11

Resolved! Report Scheduling on PA

Hi there!I found this in the help."Reports can be scheduled for daily delivery or delivered weekly on a specified day. Scheduled reports are executed starting at 2:00 AM, and email delivery starts after all scheduled reports have been generated"How do I get a scheduled report to run at specific time? At 8 a.m. for example? Or this is non-configu...

Customized Response Page

I am looking for some assistance with configuring a customized response page. The company is giving some consideration to blocking the URL category of web-advertisements and we are noticing inconsistencies when the response page appears. Currently, the page is basic HTML, no scripting. A lot of the web-advertisements on the sides and headers of ...

Wildfire Signatures vs Threat Prevention Signatures

Hey Guys, Looking for a little help here, trying to provide some proof to management of the value that the Wildfire subscription is providing to us vs just having the Threat Prevention subscription. I've looked in the Wildfire logs, but that only shows threats that were uploaded to the Wildfire cloud for investigation and were still allowed thr...

Resolved! Bypassing app-ID

Hello,Recently I deploy outbound policies to filter inside traffic to Internet, but I noticed that some application bypassing app-ID filter. Just to clarify my setup I allow some application to go out (dns, web-browsing, ssl...and couple more..) service default. In that pool isn't youtube and teamviewer, but somehow they went out bypassing expli...

Resolved! Filter Query Lexicon

Hi there,Is there a document that contains the dictionary of terms, and the description of the syntax of the PANOS filter query language?I've looked through the knowledge base, but I didn't find anything that looks like a syntax document.This would be specifically for using the filter query in the PANOS 6.0 GUI. I'm not concerned with the CLI sy...

Discussions