General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! IPv6 network to IPv6 Internet NAT

Hello all,I would like to testing the IPv6 network to IPv6 Internet NAT, but however it can not work on my lan testing, is there any documents about it, thanks.Joy

Resolved! Palo High vulnerability issue.

Dear,the palo's on our public internet are being scanned for vulnerabilities and other open issues. Last week scanning a issue regarding "OpenSSL ASN.1 Parsing Vulnerabilities port 443/tcp over SSL" on the portal website of the Palo for ssl-vpn access was detected and marked high.The security officer now wants to get this solved in a few days. ...

Block a specific spyware

Hi All,I just want to ask how can we do a spyware blocking. We want to block mariposa spyware but i tried to configure the policy but it does not deny it.Thanks.

Weird problem with SSL VPN traffic

Hi folks,We have two PA firewall pairs.We have two three VPN systems behind the firewalls -- 3SP SSL-Explorer, Barracuda SSL VPN and Windows PPTP VPN.We've had a problem over the last week where the SSL VPN systems wouldn't load their client Java applets properly and the web interface (https) would just intermittently time out, and PPTP users co...

Resolved! Disable Admin Accounts

Is there a way to disable FW admin accounts? Let's say we have a situation where we have consultants who come on site and we only want to enable their access for certain periods of time and then disable them after the engagement is complete. Is this possible?I tried creating a custom role with no access, but it wouldn't let me commit.PANOS 5.0...

Resolved! Captive portal - time out

Hello Where I can change the time when a user enters for captive portal? Caduceus do not want the user session. I have a PA500 Software version 5.0.4 Thank you very much.

PA to Cisco 5505 VPN tunnel

When trying to configure a site to site VPN tunnel from a PA 3020 to a Cisco 5505 firewal I am getting th following messages on the Cisco firewallreceived encrypted packet with no matching sa droppingall ipsec proposals found unacceptable

VPN Tunnel Monitoring

What is generally used for a tunnel interface IP? Can it be arbitrary or must it be an IP that is part of the tunnel? I've read the docs on the site, but they don't say all that much about the interface IP itself.Thanks!

Resolved! Need help in CLI command

HelloI have to make some order on my PAN device.I'm looking for CLI command:- that will show me all addresses and groups defined on my device- that will show me all services and groups defined on my device- how to list aplications from one policy and put the list of aplication to aplication groupI hope that for You it is easy With regardsSlawek

Not packet returned via subinterface

Lan2(trust zone-172.16.10.0/24)-> internal - switch from trunk-> (eth1/1-172.16.10.100)PAN FW(eth1/2-192.168.1.104/24)->(192.168.1.1/24) DSL modem(untrust)Lan2(trust zone-172.16.20.0/24)->connected thro. mpls -> (eth1/1.10-172.16.20.100)My vr config: Destination:0.0.0.0/0, Inte...

Resolved! Creating Custom Reports without (top 500) limit

Is it possible to do the mentioned?I am running PoS 5.0.2Thanks

Resolved! Response Pages for Mobile Devices

Has anyone written custom response pages that can detect a Mobile browser and changes the HTML format to fit the browser?

Email containing detailed information when a download takes place

Hi everyone, I've read the user guide and searched around here but I'm not able to find an easy step by step guide. I'd like to setup/receive an email from our PAN whenever a download takes place. We currently receive other threat alert emails etc. but not these. I'm thinking it has something to do with Data Logs as the Dashboard provides a visu...

RSA Risk Based Authentication

Hi all,Recently I've been doing some research to secure our corporate vpn access with RSA SecureID or something equivalent. In my discussions with RSA, it seems they have a token-less risked based authentication engine that does not require users to carry around the RSA tokens. RSA is claiming that currently Palo Alto does not support this, ho...

Resolved! Panorama candidate config rollback

Hi,I prepared some rule changes within Panorama but did not commit them yet. I'd like to roll those back to the running configuration. How would I be able to do that?Thanks in advance.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!