General Topics

Resolved! Do I have a split - full tunnel issue

I'm a system admin, and have also become the Network guy. This is okay: it's a small network. I'm still learning.

I have a PA-200, installed by a VAR, in a colocation rack. Rack is filled with windows and linux hosts.

I need to alter the VPN so th

...

Resolved! Email not going out

What is the configuration needed for a PA-500 to allow emails to go out. We use exchange and a Cisco spam blocker using port 25. We are recieving emails fine but external emails are not being sent out.

Resolved! Problem connecting SSH

I have a vpn configured (PA<->PA) to manage my FWs.

The problem is that when I open a ssh to the FW ip LAN (10.105.0.7), session ssh runs successfully and I can connect to the FW. But if I open ssh to the management ip 10.98.200.16 ssh remains frozen

...

import config from PA-2020 to PA-3020

Hi,

I need to change a old PA_2020 with a new PA-3020 and would like to use the configuration of old device in the new firewall to avoid to do the work again..

So, Is it possible to import config file from a PA-2020 to a new PA-3020?

If yes, is there an

...

Es recomendable sustituir un Firewall Microsoft TMG por un equipo Palo Alto ?

Estoy pensando sustituir uno de mis firewalls actuales un Microsoft TMG por un nuevo equipo Palo Alto, en términos generales a nivel de funcionalidades de firewall estoy seguro que palo alto sera mejor y me dará mejor performance, pero tengo dudas so

...

PA-500 and memory upgrade

Recently I ordered and installed the memory upgrade for my PA-500. It was under $400, is a simple end user install and upgraded the management plane to 2gb (from 1gb).

I will not give any estimates as to improvement as I do not want to exaggerate, ho

...

Custom Reports by Interface

Is it possible to get custom reports for traffic on a per interface basis? The only thing remotely close that I have found is under Traffic Reports I can see ingress interfaces and egress interfaces, but all that shows me is a daily total. What I'm l

...

Traffic denied by one context is allowed in the other

Hello All,

I have a strange situation and need some help.

I have 2 legs of my firewall implemented on Core and Edge level.

I have a host 10.1.1.10 behind my Core layer firewall trying to access an external FTP server.

On the core layer I have a policy t

...

Resolved! Application

I am trying to block some websites such as music.yahoo.com ,mylife.com Spaces.live.com and Talkgadget.com . But they aren't one of the listed choices and I am unable to add them to my blocked application list. How can I do that?

Panorama - 6.0.1 Impressions? Stable? Worth the risk/trouble?

Hi Everyone,

I have been reading the release notes... and Panorama 6.0.1 is looking really good.... but is it solid???

Also, our firewalls are on PAN-OS 5.0.8 ... will Panorama 6.0.1 have any issues managing firewalls on 5.0.8?

Thanks

Art

Global Protect Pre-Authentication with public SSL cert

Folks.

My boss wants me to implement "pre-authentication" for my Global protect clients, so that they authenticate against AD before logging on to their laptops when on VPN, and ergo run login scripts, group policies etc.

I have https://live.paloaltone

...

Resolved! GlobalProtect DNS server ignores the access routes

Hey all,

Just another PaloAlto funkiness I found out today...

When you configure a DNS server under the gateway configuration for GlobalProtect a route will automatically be added to route traffic to this DNS-ip through the tunnel: REGARDLESS of what y

...

Resolved! FTPS and Service - problem

Hello

I have FTP server on Debian 7 (ProFTPD 1.3.1) and security rule:

and now FTPS connection works.

With "application-default" as a service FTPS sessions hangs on listing directory and sfter some time FTP client was disconected.

I'm on 6.0.2 PAN with l

...

Do not display Threat log with descent sort on palo alto device 3020

Hi All,

I have a problem to view threat log on device.

My device is 3020 model, with 5.0.9 version, threat verion: 445-2292.

I do not see any threat log record when I select DESC sort, but I can see threat log with ASC sort.

Please help me why ?

thanks

Resolved! Cannot run GlobalProtect Portal on preferred IP address

Please correct any wrong statements:

1. I connect my PA to the "untrust internet" via ethernet 1/1

2. My ISP assigned me 164.67.80.0/24 block of IPV4 addresses (actually this is a lie...)

3. I assigned 164.67.80.2/24 to ethernet 1/1

4. The PA is capable

...

Discussions