General Topics

Admin authentication using RADIUS without local accounts

Hi All,

I ran across a strange issue when provisioning a new Administrator on our team. The background is that we use Cisco ACS 5.1 as our RADIUS authentication for our PA firewalls. All of the correct VSAs are input and appropriate Authorization Poli

Slow Performanced Based on Order of ACL Rules

We have several PAN 3020s at a client site with similar issues but for this, I’ll focus on a specific case. One pair in Active\Passive HA has 124 rules. We started noticing really slow RDP connect performance. (it would take 45 seconds to establish a

Inbox | Palo Alto Networks Live

Inbox | Palo Alto Networks Live

Don't see Threat and URL log in panorama

Hi All,

I have a problem with Panorama and devices log.

Panorama information

model: Panorama

serial: xzy......

sw-version: 5.1.0

app-version: 445-2292

app-release-date: unknown

av-version: 1317-1787

av-release-date: unknown

threat-version: 445-2292

threat-relea

Migration Tool

Hi Friends,

Need Small help Please share the Migration Tool. I have but when try to run got some error.

Thanks

Satish

Some VPN packet is being dropped and particular counter increased and traffic slow.

Hello guys,

I have a issue about the IPsecVPN tunnel.  One side of IPsecVPN tunnel is slow for receiving traffic but opposite side is OK to receiving traffic.

flow_tunnel_activate                       2        0 info      flow      tunnel    Number of

Custom signature for Wordpress

I am fairly new to custom signature in Palo Alto, just so you are warned. I am trying to create a vulnerability signature for detecting wordpress.

The Get request will contain /? followed by 5 digits or more. User agent will be wordpress/ followed by

LAGG Interface Documentation

Is there any documentation about how to configure a LAGG interface in PAN-OS 6.0?

I’ve read through the administrators guide, and did a search on the PA documentation web site, and I couldn’t find anything.

Thank you!

--

Rick

In my PAN firewall, I can see a lot of spyware detection in Monitor tab.

Hi,

I can see a lot of spyware detected by PAN firewall. The threat is like- "Suspicious DNS Query (conficker:xtujyzyo.net)" .

Does anybody knows about this kind of issue?

Replace a panorama managed device with a new device (different model)

Hi All,

We need to replace old PA2020 (PAN-OS 5.0.10) that is managed via Panorama (PAN-OS 6.0) with new PA3020.

Referring to Panorama adminstrator guide 6.0, "How do I replace Panorama or a managed device in the event of a hadrware failure/RMA?"

Questi

Havex Malware

Hi all,

Do you have any information about PAN detection capability for the Havex malware family: http://www.f-secure.com/weblog/archives/00002718.html

Threat vault seems to produce no hits at the moment.

Tuomo