General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Zone protection UDP flood tuning

So, UDP Flood protection on my untrusted zone kicked in for the first (and second) time last night. The end result was not passing traffic each time for about 5-10 minutes. I'm guessing that the CPU (2050) was just spinning its wheels the entire time. I'm just (blindly) using the default values:admin@PA-2050-1(active)> show zone-protection zo...

Resolved! HA dedicated to Fiber

I'd like to move my HA connection from the dedicated ports to fiber ports, however I don't have the option do change the port. Am I able to do this? Do I have to disable the HA first? Lastly, will I be able to keep the remaining settings?If I am able to do this, is it advisable? I recall from training that running the HA over a network wasn't a ...

Global Protect SSO user id

I have a portal and 3 gateways setup working with LDAP and active directory. It is setup to use user-logon with Single Sign On. All this works without issue. What I am having issues with is I have my firewalls intergrated with LDAP and Active directory groups, I use these groups for policy rules. What I am seeing, is that the Global Protect u...

Endpoint Protection from PaloAlto - It’s Here!

HelloFinally we have it!Press Release » and presenationso we can expect a lot of new topis related to this software in near future RegardsSlawek

Resolved! PANOS 6 and PA2000 series

we have a really strange issue with PANOS 6 and PA2000 series. Sometimes, suddenly the PA doesn't react anymore. Serial, MGT and other Ports are not reacting. Strange thing, the Ports are blinking, but no traffic goes through. MGT Mort does only glow at the left LED. To get the PA running again, a hard restart (power off/on) is required. We are ...

Resolved! PAN gets low score on NSS test

Are the 2014 NSS firewall tests valid? This year's results are quite different than the previous NSS results. Your thoughts?Palo Alto Networks unexpectedly gets low score on firewall test| Reuters"NSS Chief Executive Officer Vikram Phatak said that Palo Alto had issued two major revisions to its firewall operating system since the last test." "N...

TRAPS is here

We are testing TRAPS in our Lab and are quite happy with the results so far. Anyone else ?

How to publish IIS website with static external IP address

Hi,We have an ECommerce website that need to access our servers that are in our DMZ zone. These servers has IP 172.x.x.5, 172.x.x.6 and 172.x.x.8, these servers are configured in a cluster with IP 172.x.x.7. So incoming and outgoing communication is through the cluster IP address.I configured, if from any source wants to contact IP 194.x.x.187 i...

Dropbox Upload Block Rule not working

I've created a rule to allow only Dropbox downloads and not allow uploads. The rule doesn't appear to be working. Steps I've taken are below:Generated self-signed SSL certificateConfigured SSL decryption Rule for 'online-personal-storage' URL categoryCreated File-Blocking profile to block upload and allow downloadApplied File-blocking profile to...

Resolved! Trigger throttling based on traffic?

I have heard of others, instead of blocking torrent traffic, allowing it. When it is detected it someone how throttles ALL traffic from that client until the torrent traffic is stopped.As best I can tell we do not have that option of available with the AP. Correct?Thanks,Bob

Connect client at boot time

OrThe Further Adventures of a Networking Neophyte PA-200Software Version: 6.0.1GlobalProtect Agent 2.0.4Now what I need, and desire, is to have client PCs, in an office remote from the data center, login to the domain controller -in- the data center. They would like this as transparent as possible, i.e. to present that domain at login via the s...

Resolved! Authorization code issue

Hi,I’m facing problem when trying to activate licenses with the authorization code We have 2 PA NFR 3020, I succeed to activate licenses in the first one , in the second one it told me that the authorization code is already active ( knowing that paloalto send us the same auth for both)the screenshot below Regards,Sarah Hi,I’m facing problem wh...

How different between Bash remote code Execution Vulnerability ID

What condition will trigger each id because now it has six ID 36729,36730,36731,36732,36736,36737 ?

Skype blocking

I have found in testing that with blocking, the application 'skype' and 'skype-probe' if the user is not logged in the policy will block the user from signing into skype, but if the user is already signed into skype and plugs in behind the palo policy, the traffic log shows skype being blocked, but the user is still able to IM. Am I missing som...

Resolved! A/P HA with more than 1 passive unit

Hi,We have a customer looking to extend their DR capability to a 2nd physical site (Site B).Currently they have 2 PAN 3050 firewalls in an A/P cluster at Site A. As the new site will be connected via fibre we will split the cluster across both sites.Site B will very much be a cold standby site with no production load under normal conditions. We ...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!