This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! PAN with Polycom RPAD (Real Presence)

Ok. So, I'm running the 5.0.10 PAN. We are in the middle of a Polycom installation. Internal traffic within the polycom system is working fine (since no FW is in place). The problem is of course the outside users. We are using NAT for external stuff. I created a single Inbound rule (Untrust->trust) to the RPAD server. No Applications selected...

Why is there a Maximum PAN-OS Version for signatures?

Hi,Why is there a Maximum PAN-OS Version for some signatures? How can I tell if newer versions of PAN-OS can detect the same thing?E.g. I saw this:Modified Anti-spyware Signatures (1)SeverityIDAttack NameDefault ActionMinimum PAN-OS VersionMaximum PAN-OS Versionhigh20000Conficker DNS Requestalert3.0.04.1.0.0Thanks, Drew Daniels

ddaniels by • Not applicable
  • 4438 Views
  • 4 replies
  • 0 Likes

Gmail, Dropbox - Control Specific Actions

Is anyone out there doing any of the following? I didn't see specific applications for these types of things. Perhaps the only way to accomplish would be a custom application.Allow users to read Gmail, hotmail, etc., but not allow users to compose and send email?Allow users to download from filesharing sites such as dropbox, but not allow file u...

Using PAN-OS 5.0.5 with User-Agent 6.0

Hi,is it possible to deploy User-Agent 6.0 and still using PAN-OS 5.0.5. I want to avoid to many changes at one time.I didn't find a clue in the release notes. ThxCheer Klaus

kdd by • L4 Transporter
  • 2155 Views
  • 1 replies
  • 0 Likes

How many are brightcloud's updating interval?

HelloThe anti-virus signature is released on every day.The application signature and other threat signature without anti-virus is released once a week.So How is brightcloud url filtering database updating??I don't know how make the schedule of url-filtering in dynamic updates.Please let me know it.Thanks.

Bright cloud DB classifications on url

Hi,I wonder if anyone can help. there is a site - ea.sendcpt.com which is listed in both brightcloud and PAN-DBOn brightcloud it is listed as malware-sitesBut on PAN-DB which is a newer DB it is listed as business and economyThe end customer is having an issue as they are trying to access the site as it is a trusted site but they are getting bl...

Resolved! PAN-DB Evaluation - How to switch over with minimal impact?

We want to evaluate PAN-DB.We have the eval license downloaded.What I'd like to know is, if I hit "activate" in the Web GUI will it immediately kick in, or will it need a commit?Basically I'd like to know the smoothest way to change over with minimal impact to our end users.Thanks

GP Client 2.0.0 - is it next version after 1.2.8?

HiCould someone tell me that 2.0.0 is new version next to 1.2.8 or we can expect version 1.2.9 soon?2.0.0 Finally it has fixed issue with RDP connections:45997—When trying to RDP to a GlobalProtect agent installed on a Windows PC, the RDP login prompt window showed possible account option double. RegardsSlawek

_slv_ by • L4 Transporter
  • 1902 Views
  • 1 replies
  • 0 Likes

Resolved! Identified User and NAT

Hi,for certain of our users is it aloud to use firefox. they are identified by their username. But if the want to go to internet they have to be "NATted" . It is possible and when how to create a NAT-Rule? What is known: username and the application.Best regardsKlaus

kdd by • L4 Transporter
  • 5366 Views
  • 5 replies
  • 0 Likes

Palo Alto With TWO ISPs

Hello,We have migrated firewall from ASA firewall to Palo Alto firewall. In my case, we have below interfaces in Palo Alto firewall.1. ISP1 Interface (E1/1)2 ISP2 Interface (E1/2)3. DMZ Interface (E1/3)4. Inside Interface (E1/4)Since we are using ISP1 for accessing DMZ servers from internet and we are using ISP2 for web traffic of users from in...

Destination NAT with different subnet of Outside interface.

Hello,Outside interface of Palo Alto firewall is configured with aaa.bbb.ccc.ddd /30 subnet.I have some servers in DMZ those need to be accessed via internet with IP address(es)/subnet ZZZ.XXX.YYY.VVV/24.I have configured Destination Nat( including Security Policy) for these servers with the IP addresses as mentioned above.Please let me know how...

Resolved! address object strange behavour

Hi I create a address object base on a network address like 192.168.21.0/20 and when I used it as source address in my policy base forwarding rule this never matchbut when I create addresse object with a range like 192.168.16.1-192.168.31.254 and when I used it as source address in my policy base forwarding rule this matchwhat wrong ?is it bug?o...

Gregoux by • L4 Transporter
  • 3047 Views
  • 3 replies
  • 0 Likes
  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks