Suspicious DNS Query Action

Hello PAN Community,

I would just like to know if its possible to edit or change the default action for a specific suspicious DNS query?

We have a situation here where what we wanted to happen is to drop all the packets for suspicious DNS query instead

SSL VPN - Basic Questions

What basic steps have to be complete to allow a remote user to enter an ip address in their browser and get the ssl vpn authentication screen? We currently get an eventual timeout when we try to connect from a browser.  We followed the basic GlobalPr

User-ID sometimes missing ntlmdomain\ on the firewall

Hi,

I've recently seen this a couple of times on completely separate firewalls / AD infrastructures (a 2050 cluster and a 3020 cluster, both running 5.0.8). User ID is setup and working fine along with LDAP group mapping

However on the odd occasion use

Wildfire - is the full subscription worth it?

Apologies for the somewhat blunt title but it really is as simple as that

I've been using the bundled WildFire service for some time and did begin to wonder if it was working until it pinged on a couple of zero day Zeus trojans - seems our folks are

How to setup a redundant IP?

I'm trying to setup DSL as a redundant internet provider, incase the Cable goes down.  I saw a 3.1.1 document on Dual ISP Branch Office Configuration and got confused.  Our PA-500 is using 4.1.6 Wondering if anyone could help me on this?

ethernet1/1  

How to test your firewall

We have a Palo Alto PA500 with several security rules. It seems okay, but the CEO asked that I'm sure the company is secure.

So the question is, how can I test we are safe from the outside world?

PA-3050 stops processing traffic

Has anyone had a PA-3050 stop processing traffic? Our PA-3050 started dropping all traffic today (internet access, DMZ, etc.), we failed over to the standby unit and were able to restore service.

Currently we have a support ticket opened but wanted t

PANOS 6.0.2 release date

hello,

is there a confirmed release date of PANOS 6.0.2? A month ago I had a case open, where the support guy has told me that the expected release date is arount the 21th of April. Today is the 24th and still nothing

thanks

Rudolf

Silent deployment of Global Protect Agent

Hi,

We use MDT to deploy new computers in our company and I have found that if I run the Global Protect agent using the silent switch the install finishes but no virtual adapter is created and the VPN does not work. If I remove the silent switch so th

Captive portal bypass

Anyone familiar with a way to bypass captive portal for non-browser-based applications? Doing some testing with an eval unit from Palo alto and have configured agentless DC monitoring and using captive portal auth for a fallback. If a user hasn't alr

PAN-DB URL Filtering Updates

Hi,

We have a couple of PA devices configured in HA mode. I just want  to ask if it is normal that only the active firewall gets the URL filtering incremental updates. eg. FW-01 (active firewall) gets updated to version 2005.12.811 and FW-02 gets stuc

Problem with NAT rules

Hello

Task is simple, give access to 3 IP from Internet to camera on non-standart ports. Ports and  local IP are:

192.168.220.251:554 -> x.x.x.x:554

192.168.220.251:80 -> x.x.x.x:8881

192.168.220.251:8554-8557 -> x.x.x.x:8554-8557

where x.x.x.x is one

UIA - Not domain user Identification Problem

Hello,

I have a problem/doubt with the user-id and in particular with the identification of the local machine users.

Internet access is only allowed for domain users and if the users enter in their computer with the domain account They don't have probl