Security rule for url filtering - best practices?

I would like to know what is the impact, if any, when configuring a security policy with allow action and associate with a url filtering profile if we use application as any or application set to web-browsing.

I understand the url filtering is only ap

License for IPsec and SSL VPN

Hi all,

  I need to know if we need a license to acivate or configure site to site VPN ( i.e: between Cisco ASA and PaloAlto), and also for remote client (ssl vpn). if it's possible can someone please help me with the procedure to follow for these two

Stats Discrepancy in the ACC

Has anyone else noticed this?

Go to the ACC and sort it by Bytes (I believe this trick works regardless of the sort criteria, but it’s easiest to see this way). Make a note of the top three or so values

Next, Click on one of these, I picked the top: we

Reporting on User downloads and uploads

Greetings,

Disclaimer:  Our regular Network Engineer is out on short term disability so I am the Sr. Systems Administrator trying to fill in.  Palo Alto reporting is not my everyday thing so I apologize in advance if this request seems to a bit basic

I

Strange VPN behaviour

Hi all!

Some of my colleagues have problems accessing certain services like TFS, Intranet, and Office 365(outlook, lync) through VPN. The weird thing is that for others it might work either 100%, 50% or whatever feels right that day, it seems.
What cou

Palo-Alto upgradation From 5.0.x to 6.0.x

Hi All, We are having PA-5050 & and PA-3020 model running on software version 5.0.8 & 5.0.9 and we are planing to upgrade it to 6.0.2. We firewall is running in Active/ Passive cluster. Please any one help to know the processes and suggest which vers

Hi all. We have 60 XP machines I need to block from accessing the Internet. HOW? I am new to the PAN's so bear with me?

Hi all.  We have 60 XP machines I need to block from accessing the Internet.  HOW?  I am new to the PAN's so bear with me?

site to site vpn qestion

We're moving from Checkpoint to PAN. For site to site vpns, I'm assuing i should set up a logical subinterface? How do you ensure its floating/shared in an HA cluster?

Global Protect Client

Is there a specific command I can run to see what version GP client users are using?

how bradford networks operate with Paloalto

I found one document  Bradford Network Sentry (NAC) User-ID Integration , however it is more of bradford oriented.

Disabling VPN Tunnels from trying to establish when NOT actually required

Hi,

We have several kits which we use for conferences as and when needed. These kits VPN back to us when alive. The problem is when the kits are sitting in the cupboard the Palo continues to try and bring the VPN tunnel up which fills our system log u

Frustration with threats from PA

Is anyone else frustrated with PA's approach to threats and threat signatures?

Prime example: "Netbios Small Piece Data Evasion Attack Vulnerability" - signature ID 33511, link to the Threat Vault: https://threatvault.paloaltonetworks.com/Home/ThreatD

Does Panorama M-100 support more than 100 devices?

Looking to manage more than 100+ devices (around 300 device). is the M-100 able to meet this requirement?

below is my current planning setup:

M-100 (panorama mode) <--------------------------> 100+ PA box

or do i required another M-100 box as log colle

Setting up DMZ

First time poster in the new forum.

We're looking into creating a pure DMZ on our Palo Alto. Right now all our servers and network are behind a Layer 3 interface with private IPs. Anything that needs to be externally accessible is done via a One to On