Have anyone upgrade PANOS to 6.0.0 already ? any problems ?I wonder why version 6.0.0 release date (01/19/2014) is older 5.0.11 (01/29/2014).Regards,
How can I restrict a certain group (ip range\VLAN) to internet only access.? I don't want them to get to internal network shares with unfamiliar devices. We use Aruba Clear pass to authenticate and assign IPs and the PA 500 sits on the parameter. I know the answer is not the PA but probably a mixture of my other network devices.Clearpass Device...
Not sure what this means and how to alleviate it? The firewall is running 4.1.13.SSL/TLS Protocol Initialization Vector Implementation Information Disclosure VulnerabilitySynopsis : It may be possible to obtain sensitive information from the remote host with SSL/TLS-enabled services. Description : A vulnerability exists inSSL 3.0 and TLS 1.0 tha...
I recently added the ms-lync-online app to a rule in my PA-500. We decided we didn't need it and removed it. After a month of commits and saves that app is still showing up in the commit window summary and asking for a required app with it. I have checked everywhere and that app is not part of any rule but the PA unit still thinks it is. Any...
I have a support ticket open about this as well, but I was wondering if anyone has encountered an issue where GlobalPortect does not detect the antivirus installed on your computer for HIP checks to work and know of a fix for it? I have the latest version of Microsoft Security Essentials with the latest version of GlobalProtect (2.0.0). Thanks,Mark
HelloI tried to switch url-filtering vendor from brightcould to pan-db in panos 6.0.0 for test.But it was not switched with the following error message.I tried that fw reboot. but it was not still switched with same error message.Please let me know resolved way.Thanks.
I currently have a very large number of "Current size of threat log database exceeds alarm threshold."On occasion I do see that logging stops at some point during the day and then resumes after the nightly database purge occurs.I would like for the nightly purge to purge out more of the log data than it is currently purging. I would like to not...
Hello,We use this FW as proxy, we have PaloAlto1 and PaloAlto2 it's cluster how can I troubleshoot this issue.Thank's youBest regards,
In light of the recent security announcement regarding GameOver Zeus, does anyone know how to block .enc type files under FileBlocking?
Our campus has been getting a lot of NTP DDoS attacks of late. While the simple solution would be to shut it down except for necessary systems, the problem (as per usual in public-sector) is that everyone seems to want to run something that uses it and complains if we start blocking. Looking at the attacks, it's very easy to see the difference ...
Hi everyone,some trouble if i turn the activ one to the passiv and vice versa. the policy was syncronized but the result was different.Same rule and same source / destination and same App (ssh). in the unsuccessful log i can't either see session- id or outbound-interface.successfulunsuccesfulboth ports are identically configured and are up. I ap...
HI I updated yesterday software from 5.0.10 to 6.0.0 But after such an error occurredBefore that everything was normalBut after such an error occurredmany reboots, many check updates but the error is stillWHY HOW TO FIX HELP
Hello~Since PAN OS 5.0.x more We can download wildfire signatures in dynamic updatebut I don't know understand about Minutes Pass HourIs it same the other AV, Content threshold (hours)?
Bit of a curly one which I'm not sure of the answer on.We're hitting our PA2020's pretty hard in the SSL VPN department (now hitting up to 50 or 60 clients at a time), a reasonably recent ramp-up owing to some business expansion - also have several IPSEC VPN's running through the same box.I'm noticing that in my performance graphing, the firewal...
From time to time I observe a lots of DNS queries (not UDP floods) from Internet to my DNS servers. Unfortunately those queries have negative inpact to my old firewall (it can't establish so many sessions, which makes the network stops).Probably my DNS servers are targets of:- DoS application layer attacks: target specific applications, eg DNS d...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 2 | |
| 2 | |
| 2 |
