General Topics

False positive detection?

Hello,Our PA-500 found a virus with a file “PCCPatcher.dll” which is related to one SONY mobile software in user PC.I’ve google it and a report published by herdProtect Anti-Malware explained that this file is mosty likely a false positive detection, the file is clean. How can we know and proved via PA-500 that it is exactly fault?http://www.her...

Resolved! Blocking page for https traffic

Hi all,We are currently on PA-2050 in version 5.0.9.Creating Web secur profile for test categorie (with PAn-DB).If trying to access blocked page in http => block page (NICE !!)If trying to access blocked page in https => Page "session has been reste" - default browser block page.Would like to have the palo block page everytime.Can you help...

url redirect issue

greetings,Having problems with this link which get blocked by phishing and other frauds.....it redirects to a perfectly legit pdfhttp://cl.s6.exct.net/?qs=ec6d1417fd5e977ca0aa6f8b2312fa570c2b7b5af100f412180c0f877d9c2580can anyone advise on how to troubleshoot this......Many thanks

Resolved! PANOS 6

Hello,I guess we've missed the release event of PANOS 6. Sadly we have no overview about the new features and so on...Do you have some information to share?

How to Generate a Configuration Change Report

Hi,I would like to generate weekly a report with all the changes administrators made during the week.I would like to export information I can see on the "Configuration Logs" with "Before change" and "After change".If generate a csv file, I dont have the detail anymore, only date, admin name, and action type.If I execture "show log config", I don...

Resolved! Do interfaces still pass traffic if the device is shut down

Hi,I'm trying to troubleshoot a network issue and want to eliminate my palo alto device as the culprit. It is currently in virtual wire mode. My question is: Will the interfaces remain active if I shut down the palo alto or do I need to physically remove it from the network.Any help is greatly appreciated.M

Resolved! Custom format for email Alerts

Hello community,I need help with the customization of emails sent for PAN, to modify the content and subject.Regards.--Marco

Resolved! Log DB quota for Panoram

Hello ,Can any one please advise , how much GB needed in panorama to keep the logs for 3 month .I have 8 firewall connected with the Panoram for sending logs.RegardsAmber

PAN-3020 CONFIGURATION.

Dear Friends,Please help me to configure the pan-3020 appliance in V-wire mode and tape mode.RegardsSatish

Resolved! Mobile security

Hi...Any one explain, how to polo alto perform mobile security like remote lock, wipe and malware protection.

Resolved! Firewall Deployment

Dear Friends,If any one have idea about Virtual Wire Deployments please explain.

Lot of 'SMTP Long MAIL anomaly Vulnerability' critical warnings

Sometimes we get a lot of 'SMTP Long MAIL anomaly Vulnerability' critical e-mail warnings from the PaloAlto PA-500.PA-500 is filling up our mailbox with this warnings until we block the IP-range.Does anyone has a suggestion how to moderate this warning.

Content-Filter and Decryption - ERR_SSL_PROTOCOL_ERROR

Hi!I see a strange problem with the combination of content-filtering and decryption:- Decryption is on- Facebook is declared as "block-continue"If I open "http://www.facebook.de" the block-continue-page appears - pressing continue forwards me to "https://www.facebook.com" and everything is fine.30 minutes later, I try to access "https://www.face...

Resolved! Network Search in Monitor tab

we can simply add the network in the monitor tab along with the CIDR. e.g. 192.168.0.0/24RegardsAamir Khan

Apple clients and user-id mapping

Hello All,We recently installed two 3020s in active-passive and connected them to our LDAP. We see some users are mapping, but not all.Is there a way for unknown users to authenticate to the Palo Alto so they are given the correct policy? This was a very simple procedure in our previous Lightspeed filter.A local user agent would be ideal!Thank...

Discussions

False positive detection?

Resolved! Blocking page for https traffic