Is it possible with global protect and split tunnel setup to have policies applied for url filtering to the local client so that sites can be blocked in split tunnel mode?
Hello,Can you answer these questions regarding the tunel mtu that appears in the output below?cstankevitz@PA-500-Local> show vpn flow tunnel-id 27tunnel Sterling id: 27 type: IPSec gateway id: 1 local ip: 164.67.80.124 peer ip: 5...
why we are getting CISCOVPN traffic flow on VPN. please suggest.
We have upgraded 5 of our BranchOffice firewalls from 6.02 to 6.03 yesterday. All updates went fine except one: We are going to get an issue as soon as we want to connect via Global Protect to the Gateway. The window "Client Certificate Error" pops up:The error log shows: (T1636) 07/28/14 11:56:52:382 Error(8377): pan_obj_get_value() failed wit...
SNMP can be used to get packets per second and bytes per second information for individual interfaces but not for an aggregate interface. Statistics from the individual ports need to be added manually in order to get the throughput of all the interfaces.
Hello,What difference are between 'user eq' and 'user in' in filter of traffic logs?I want to see output which is filtered by partial user-ID not full user-ID.For example, There are as below user-IDs.SA10001SA10002UQ20001UQ20002.......I want to filter for all started 'SA' users in traffic logs.KC Lee
Hi Support Team.I have problem with PPPoE on Palo Alto PA 3050I config with true User and Password.my ISP reset MAC already.But PPPoE still failure.Pls help me.Thanks
How do I cable up a pair of PALO 5050's for HA?
I have a number of reports we use to generate usage information, such as the top 100 applications used over 24 hours sorted by bytes.If I run this report manually with RUN NOW, it generates perfectly and everything is sorted like it should be.If we schedule this report to run automatically and email the results out to a subset of people, the sor...
Hello,1. I have three zones: Public, DMZ, PrivatePublic interface: bound to 164.67.80.124/26Private interface: bound to 192.168.1.1/24DMZ interface: bound to 192.168.2.1/242. I use bi-directional NAT to expose a few of the DMZ machines via their own public IP addresses:164.67.80.77 <-> 192.168.2.77164.67.80.78 <-> 192.168.2.78164.67....
HelloIs Global Protect Client 1.x.x ended? Since may 2014 when we got 1.2.10 there isn't any new update when 2.0.x got two new versions.Is a time to move to 2.0.x version?With regardsSLawek
I realize that PBF application based routing is limited to a subset of applications supported.We're specifically looking to use PBF for Outlook-Web-Online and it's not in the list but many other things are, like MS-OCS-* and SMTP, etc...Do we know why some applications are listed and why?Is it possible to make a feature request to support this a...
Hi there,We have a PA-200 recently deployed at a low bandwidth field site. Monitoring the traffic shows the majority of traffic is from the PA-200 itself, checking for updates, Panorama, Wildfire, etc. Is there a way to configure a PA-200 to only perform this on a scheduled basis? Right now it's transferring about 400Mb per day, which puts it wa...
Does anybody have any suggestions on how to easily cleanup unused address objects. I recently migrated from Cisco ASA, and I'd like to cleanup some of the old garage objects that I brought over that are no longer being used.Thanks!
If we are given a document which shows specific files used by bad actors in our sector, is it possible to have the PAN alert/block on these files? I have the SHA256 and MD5 hashes.
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 2 | |
| 2 | |
| 2 |
