General Topics

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...

Resolved! Config commit is taking nearly 10 minutes with 3.1.1

Previously, using the 3.0.x series the commit where really fast, it sometimes took less than a minute. Now, every config commit is taking nearly 10 minutes : 08:40:02 17 Commit FIN OK 08:49:36Is there anything that could be done ?Thanks.

IPSec VPNs for mobile users

Hello, is there a guide to setup IPSec VPNs for mobile users?Thanks

SSLVPN Checklist for Mac OS X

Would like to install SSLVPN client on MacBook Pro's. Would like to create installation checklist to make to list how to install and howto use VPN client after installation. I installed on one Mac already but did not see a shortcut or NetConnect icon...

Resolved! AV version 349

The Release Notes for AV version 349 are empty - no new viruses and no new old viruses. At 66MB is should be a large update. Is version 349 suspect, or are we ok to install it? Thanks --

Resolved! Changing the URL for whois lookups

Hallo! I'm trying to figure out the format of ip-address-lookup-url which defaults to http://www.networksolutions.com/whois/results.jsp?ip= The Network Solutions site is not that useful for addresses allocated to RIPE, APNIC etc so I tried to specify...

Is ther an OSPF issue in PAN-OS 3.1.5

Hello,We were doing some tests on ospf, and we noticed that the firewall dont flush his ospf adjacency table even if a nheibour goes down, and this for a duration of one hour, in wich it continue to include the wrong information (concerning the gone ...

Resolved! Virtual Wire - Guide?

We have a PA-500 that's in L3 mode with a simple ethernet1/1 (trust)and ethernet1/2 (untrust) setup.I want to add a virtual wire to do IPS inspection on traffic to a DMZ network that is currently in front of the PAN, and where it would be a lot of ef...

Resolved! Feature Request - DNS name as source/destination

It would be very useful to use a public DNS name as a source address or destination address directly in Security Rules. Currently, a domain/category etc.. can be blocked or allowed through the URL filter as a destination. However this can make the si...

More granular with Vulnerability Exceptions?

When adding a Vulnerability Exception, is there any way to make the exception more granular? (being able to add the exception along with an IP host or range, source or destination IP, zones, or virtual systems.) For example, If I wanted to ignore a c...

Recommended max user per Platform

Hi everybody,is there an best practice or recommendation for how many usersyou should take which platform?For example:until 200 user take a PA-500greater 200 and less than 800 user take a PA-2020and so on!Kind regardsChristian

Packet Capture instance within Details of Traffic Log

Hello,What is the significance of the "green down arrow" packet capture within the "Details" field of the Traffic Log? We have no packet capture defined and it only shows up randomly for certain connections. Is this an automatic output if there are i...

Honeynet off of PA

Hello All,I have just started configuring PAN 4020 for the first time - a newbie - planning to run it as virtual-wire. However, I was informed that the FW supports hybrid routing - i.e. l2, l3; my question regards a honeynet, that I want to hang off ...

Resolved! SSL VPN client support - Apple iPad?

Does anyone know of a way to get an SSL VPN established with an iPad?I've managed to make it work with XP, Windows 7 (32 and 64 bit) and OSX, but I don't think the iPad is supported.Is this likely to be on the roadmap, or failing that is there an alt...

Resolved! URL Group Management

Question - I have a default URL profile for all departments blocking a vast number of categories. I want to allow contain sites for other groups say sales, admin, IT, surveyors... Do I need to copy all the URLs or can I set a profile that simply adds...

FTP slow through PA-500

Hi,We have our PA-500 set up as follows:Ports 1 & 2 as VWire connected to our firewall with AV and malware scanningPorts 3 & 4 as L3 for our user traffic, scanning AV and Malware and URL filteringWhen a user uses FTP to send files to servers on our D...

Forum Posts

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

Resolved! Config commit is taking nearly 10 minutes with 3.1.1

IPSec VPNs for mobile users