General Topics

Intial Setup Help

Hi everyone ... just bought a PA-200, and this is my first experience with this sort of device. A little bit of a learning curve!I am moving from a Barracuda Link Balancer. This is my setup.We have 5 public IP addresses, let's say for simplicity sake 173.61.106.10-14. ISP gateway is 173.61.106.1. We have FIOS and all 5 IPs come through 1 cab...

Sorting Routes in GUI

Hi there,it is a very nice feature to give a name to a route. But if would be much nicer to sort them by name in GUI.Or ist there a way how to do it?Roman

Resolved! About WildFire action

when you create a security profile with fordward action against forward and continue the what is the action ?

Create a Palo Alto to Sonicwall VPN

I created a new document from lab testing the Sonicwall to Palo Alto VPN connections. But the only place I have permission to upload files is in DevCenter. So here is the link for anyone who needs the setup instructions for both sides.Create a VPN from Palo Alto to Sonicwall

Unable to view YouTube on HTTPS, for some people

For a long time we've had a rule that grants access to the youtube application (and its sub-applications) as well as the google-video-base application. This rule grants access for people to watch YouTube videos if they are in a certain Active Directory group. We globally allow access to the following URLs, so that YouTube access is controlled ...

URL Filtering Time-Quotas

Hi,We're planning to use the Palo URL filtering features to replace Websense.Just wondering if it was possible within Palo to do any kind of URL filtering time-quotas?For example, a user might be able to look at 'shopping' category sites for 60 minutes or so before receiving a block message?Cheers,Rich

How to import Certificate using CLI?

Hello,I'am trying to imort a certificat using CLI (set shared certificate AVF-ROOT-CA-2014 public-key command) but the device is only taking the first line of the public key. So i'am searching for the correct way to issue the command so that the CLI tkae the entire public Key.Thanks for your help.

GZIP File - Google Translate

Hi,some users reported they are unable to use Google-Translate any more. I saw in the logs, Clients are trying to download GZIP files with the app google-translate-auto and google-translate-manual:I'm sure, the users were able to use Google-Translate in past. So the problem is since recently.

Resolved! How to restart captive portal process

Hello All,Anyone knows that how to restart captive portal process?Thanks.Regards,Joy

Resolved! Suspicious DNS Query list

Hello,Is there a list of all the DNS Querys that PA considers suspicious?I was considering changing the default action from alert to block for these signatures.Since there is potentially 1 million URLs that will automatically get blocked when adjusted, my client might want to go over the list before making the decision.Thanks!

Resolved! Virtual Wire deployment: vlan not crossing firewall

Greetings,Soon I need to get our firewall off from tap mode into a virtual wire deployment. We'll be placing it between our router and core network switch, with no local secondary production subnets to worry about so virtual wire seems to be the ticket. A problem we had with a previous attempt at this was that our phone traffic, which is voip a...

Needing all help possible to upgrade our lab from PA-500 to VM-100s

Good morning,I am John Hauser, a trainer for Fishnet Security, and I have been tasked with upgrading our lab environment from our old PA-500 hardware units to the VM-100 FWs. I have very little VM experience both on the initial setup of the VM side and then also what modifications will have to be made to labs to make them work. I have heard ma...

Resolved! DoS Protection Logs

If you have a DoS policy setup with both an aggregate and a classified DoS profile to protect a webserver and you see flood logs in the Threat Tab.. is it possible to tell whether or not the flood matched on the aggregate or the classifed DoS profile while splitting those into two separate DoS policies?

Resolved! PAN VM series throughput

Is the throughput on the PAN VM series an arbitrary cap set by the PAN software? It seems that it certainly shouldn't be on the hardware side as one could do 10gb netorking, put it on SSD and throw as much ram/cpu at is as they desired. And I would think it's not a software 'limitation' since the PAN 3000s and up go well above 600mbps.

Has anybody encountered a situation where a rule was configured for one application but matched other applications?

I have the following ruleI used 'any' as the service because we have web servers running on multiple ports and not just on the default.While it does match ssl and web-browsing traffic as expected, it also matches unexpected application traffic like the followingI don't understand why it would match oracle traffic. Any ideas?

Discussions

Intial Setup Help