Wrong SNMP Values after Upgrading to 6.0.2

Hi,

after Upgrading from 5.0.7 to 6.0.2 I got wrong values for active sessions information in my monitoring tool. The device it selfs shows a much lower value then my SNMP-network Monitoring tool.

E:G.         

on the device:

At the same time via SNMP

CVE-2014-0198 - Anyone have a signature?

Curious if anyone else is working on or looking for a signature for this vuln: NVD - Detail

DoS vulnerability brought about by a bug in OpenSSL. Is PAN working on a signature by chance?

Details: The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x thr

debug uid group mapping

hey

is there any document describing how to debug agentless group mapping process?

Monitoring Attacks in real time

Hi,

I'm wondering if there is another way instead monitor tab to monitor attacks in real time.

Does anyone else thinking about it?

Leonardo Dias

SSL Decryption and Cisco Jabber client

We currently use Cisco Webex for desktop sharing, video conferencing and IM. Our environment has mostly people using the old Webex connect client and a few 'pilot' users of the Cisco Jabber client.

Recently we implemented SSL Decryption and everything

Howto track a Public IP outside to failover in case of lose of connection ?

Hi,

I have a cluster of PaloAlto 3050, I want to monitor a Public IP (by example Google.com) and in case of the PaloAlto lose the connection I want to failover to the second PaloAlto.

I already monitor the Interface, but if the Interface is UP, but the

Proxy ID's question

Can someone clarify Proxy ID's for me? From what I see they're the same thing as encryption domains? What is the syntax, does it have to be one to one: ie SIP 1.1.1.1 DIP 2.2.2.2

Bulk Apply Profiles

Hi All,

Is there any way to easily bulk-apply a threat prevention profile to a large list of Security Policies?  Maybe through the CLI?  We have about 600 security policies that do not have threat prevention turned on.  I'd like to do so, and have the

ACC factor Reduce level

Hello All,

is there anyway to reduce the ACC risk factor value?

Regards,

Maher

Problem with incomplete application

Hi all,

I have the same problem with incomplete application.

!Public zone! <====> PAN Firewall <====> INSIDE Firewall <-----> Server IP.

I have nated Server IP to Public ip, and configure rule like the below.

Name: (Ping) ; Src zone: (public); Src: (any)

Threats blocked by Wildfire.

How do you distinguish when a threat is being denied or blocked because of Wildfire, versus the standard antivirus definitions in the PA firewall?

Attention : GlobalProtect attempts to create a VPN connection

Hi there,

Maybe this question is more relevant to designers of Android Operating System, but I will try with Palo Alto first.

I've got Nexus 5 Phone, and Android KitKat 4.4

I would like to make Android Phone to connect automatically to VPN and I managed