This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

HTTP DDoS attack block signature

I need to know how to create a custom signature to block HTTP DDoS attack signature against our Web server.The common pattern I can observe in the attack is - either (1) Automated specific URL access or (2) URL access request with Cache-Control: no-cache\r\n\I appreciate your comments or suggestions.Sincerely yours, Mike

Resolved! I can not filter the wildfire submissions logs whether malicious or benign in PANOS-6.0.0.

HelloI am testing the wildfire with PANOS-6.0.0 for POC.There are malicious or benign on category in detailed log view.But I can not add category column in wildfire submissions logs. I want to filter malicious or benign such as filtering source ip but there is not category column.Is it the bug? or not?If not, how should i do?Cheon

Group HA Peers are out of order in Panorama 6.0

When I select the "Group HA Peers" in Panorama 6.0, my Active firewall in the pair shows up underneath the Passive firewall in the "Managed Devices" display. Also, the Active firewall shows up in the parenthesis instead of the Passive firewall.Does anyone else have the same issue with Panorama 6.0?

jwolach by • L4 Transporter
  • 2235 Views
  • 1 replies
  • 0 Likes

Blocking WebCam Traffic

Hello All,I'm sort of new to the Palo Alto firewall world, I had a question about blocking traffic to those adult free live cam sites, I dont want to block skype or facetime or anything simliar. All I really want to do is block specific traffic from those adult cam sites, I know its a weird question but if someone could shed some light on this I...

shane by • Not applicable
  • 4151 Views
  • 4 replies
  • 0 Likes

allow Skype and Block Skype VoIP and file sharing

HiI've been asked if I can use our Palo's to allow skype messaging only and block users to make calls and send/receive files using Skype. I already seen some discussion saying that this is not possible but i'm wondering if paloalto comes with something new in the new PAN OS 5 and 6 releases since those discussion are from 2012 and 2013.Thanks

Lahcen by • Not applicable
  • 3095 Views
  • 1 replies
  • 0 Likes

Resolved! Help setting up a rule to block all traffic at night

OK, I'm new to firewalls in general and I inherited our Palo Alto PA500 with PANOS v5. I"m trying to set up a rule that doesn't let any traffic in or out of the building from 7:00 pm to 7:00 am. Currently my boss has a rule that the last person out unplugs the internet from the LAN. I find this to be ridiculous and insist that we can do somethin...

acole by • L1 Bithead
  • 6189 Views
  • 6 replies
  • 1 Likes

Can PA block Web shell or shell script?

Hello, guys~One of my customer want to know whether the Pan block web shell or shell script. In my opinion, there's no ips which can block those attacks 100%. Threat prevention of the PA is signature base also, which means if it detects well-known web shell, it might block it. If not, it can't.It's sure that web shell is based on web server appl...

JTR by • Not applicable
  • 4652 Views
  • 1 replies
  • 0 Likes

packet size issue

Hi All,Noticed unable to ping packet size above 996 after upgrading to PAN OS 5.few of our internet apps(cloud) is acting intermittently Anyone encountering the same issue? Any advice is appreciated? Thanks.> ping size 995 source 172.21.194.22 host google.comPING google.com (74.125.226.14) from 172.21.194.22 : 995(1023) bytes of data.72 bytes...

ateo by • Not applicable
  • 4458 Views
  • 1 replies
  • 0 Likes

Resolved! Traffic log showing "attempted" rules

Hi,I have a few security policies (below) and did some testing on them, and found the traffic log displaying some interesting results; I have an idea of why this shows up in the log, but may be somebody more experienced can confirm.I have a rule that allows DNS application, any port:and a rule below that allows any outbound traffic:When looking ...

MMCiobanu by • L3 Networker
  • 3395 Views
  • 2 replies
  • 0 Likes

Wildfire Activation

I successfully actived Wildfire in my environment..however, no data is being pushed to my external syslog server (Splunk) or the online Wildfire portal. Is there a sample file I can download to test if its working?

rrau by • L3 Networker
  • 2556 Views
  • 2 replies
  • 0 Likes

External Captive Portals

Hello I have a question about external captive portals .. My client is migrating the firewall to Palo Alto, but he wants to keep the captive portal that is already in use in another box. My question is: How can I make users be visible and identifiable in palo alto, sending the internet requests (websites) to another box? this can be done? The id...

Jean by • L0 Member
  • 3522 Views
  • 2 replies
  • 0 Likes

Resolved! Stop WMI-probing on User-ID Agent

Hey there,I am glad to join this community and and excited to work with these new age firewalls.To keep this question short and sweet, we have to PA-500's and are using GlobalProtect for VPN, and it works awesome! However, I did not set it up, but did take over his recent position.Now from my reading on the GlobalProtect set-up I understand the ...

Zewwy by • L3 Networker
  • 9379 Views
  • 6 replies
  • 1 Likes
  • 24395 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks