Disable Inspection for Sip ?

In the ASA you can disable SIP Policy Inspection. In the Junipers I think you disable the ALG. How do I do this in the Palo Alto ?

Firewalls often try to apply rules around the way protocols work which can cause them to break. I dont want SIP to be in

Good Technology Issue

Currently, we are experiencing an issue with a product called Good Dynamics version 1.4.31.5.  The vendor "Good Technology" is stating that the Palo Alto firewalls are causing an issue with some sort of SSL heartbeat connection.  Is there an know iss

machine authentication

hello!

we have a need to identify user machines associated with a domain. specifically, we want to create security policies based upon domain membership. is that even possible, and how would we achieve this functionality?

thnx!

configure PA-500 to send report using gmail account

Hi all,

   Please I need to configure paloalto PA-500 to send report using a gmail account. please can someone help me.

Best Regrads,

Eval question

Given a flow and properly written policy to allow Facebook and its myriad apps/widgets on port 80/443, other than the admin management overhead (i.e., having to open ports 80 and 443), how is what Palo Alto does different from what Checkpoint does?

Th

Counter to identify if device is dropping traffic

Hi Everyone,

I am looking for help to identify the best way to see if my firewall is dropping traffic because it cannot keep up with the amount of traffic going through the interface.  I want to make sure my firewall can keep up with the amount of tra

OpenSSL Heartbleed bug: CVE-2014-0160

Hi,

Just wondering if any Palo Alto versions are affected by this bug in OpenSSL?

http://heartbleed.com/

Regards

What is the default syslog format in PanOS 5.x?

For all the various log types (config, system, threat, traffic, HIP) what is the default syslog format?

All the fields are available to edit in when creating a custom log, but it would be useful to have the default format defined for reference.

external captive portal

I'm thinking about trying something a little out of the square with user-id and captive portal. Let me start with the context and business goal:

• The PAN is deployed as a data centre firewall.
• I'd like to use some policies that permit clients access to