Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
Is there a way other than waiting for the timeout to expire to remove an ip from the list of blocked ip's once it is blocked by a rule with an action of block-ip? I hope that makes sense .
Thanks,
Jim
Hi,
PA can create report for Traffic, Threats, URL... very well.
However, I don't see any way to create report for CPU, Throughput, or Session in long time (about one week, or one month, whatever time),
Please let me know, can PA do that?
Note: Do not us
...
Working with Active FTP, we are having problems with transferring files larger than 1.5GB because the control channel hits the idle session timeout for FTP (set at 1800 seconds). Temporarily we have increased the timeout to 5400 seconds as a workaro
...
Hello,
When I working over Panorama, I have a continuos messages, If I try to see security rules or traffic logs or change with and other device, It presents this message "Could no set the session location" any idea?
Note
Panorama version: 4.1.6 over
...
We have an intern who we have given admin rights to our Palo Alto boxes and Panorama. I created a custom Intern role for him that just gave him access to the logs and reports and things but then read only to everything else. What is happening is when
...
Hi All,.
Is it possible to assign ip address to tunnel interface while using for s to s vpn? if yes,.. what ip needs to be used? I am trying to do PBF to tunnel interface for which we need IP address assigned to tunnel interface.
Regards,
Gururaj
Hi All,..
We have two clients who have same ip subnets for VPN users ( ex. 192.168.29.0/24). Is it possible to configure PaloAlto to support both VPNs for different source users.
VPN1: Source- 10.66.249.0/24
...
Hi all,
I'm testing out the SSL forward proxy feature of the PAN and the only issue I have is that gotomeeting doesn't work.
I configured it with the guide from the website here and made the two rules one which says don't inspect banking/medical etc. f
...
Hello
I have a questions about agentless user-id in panos-5.0.
I know that cache time of user-ip mapping information is 45 minutes(default) on agent and cache time is 1 hour(default) on FW in PANOS-4.1.
Are these time values same in PANOS-5.0?
If it is r
...
Having Intermittent failures when downloading files on 4.1.11 with Wildfire enabled. I am seeing the following errors in the packet capture, [TCP Previous segment lost] [TCP segment of a reassembled PDU], [TCP Out-of-order] [TCP segment of a reassem
...
Greetings,
We have our first tunnel up and running, but it’s connecting on the fixed IP address, not the floating IP. This eliminates the failover capability.
Could this be a simple configuration parameter, or a bug?
How can I fix this. I havent worked
...
Based on what I am seeing, there does not seem to be a way where I can limit what users can be reported against. For example, I have a help desk manager that needs to only see his staff. Right now, based on the way the firewall functions, he can se
...
I have been running 4.1.12 for some time. For me, this has been a stable release. 4.1.13 has been out since 5/30/2013. I do not see any discussion on 4.1.13 in the forums. Are people generally pleased with 4.1.13? I'm considering upgrading my
...
Does anyone have any experience setting up VPNs between these two vendors producs? is this question too vague?
We're considring getting sonicwall devices for remote offices but Im worried about possible compatability issues. Any feed back would be app
...
Raido_Rattameis
TomYoung
on:
Confused about QoS on Palo, need some assistance.
TomYoung
on:
Static Port Address Translation question
TomYoung
on:
what is the cli command for checking last failover
