Dynamic update internal firewall

Hi all,

We have an internal firewall that does not have no Internet access. I wonder what is the best way and best practice in updating the IPS / AV signature (no URL filtering).

Any recommendation?

Thanks

Remote Client VPN Configuration Options

Is it possible to configure remote vpn client access without a Global Protect Gateway license? It seems that remote client vpn configuration depends on HIP Objects/ Profiles, which in-turn requires Global Protect licensing. Is there a way to configur

Setting up second gateway: Gives Cert CN error

Hello all,

I have a (working) Global Protect Portal+Gateway envrionment. I am now trying to setup a gateway in a second datacenter. I have setup the same GP-cert and Client-Cert, cert_Profile and GP Gateway settings. The gateway works, when setting a

How to custom a DNS query and block it ?

There has Dynamic Block Lists to block unwanted IPs.

And there has DNS signature in Anti Spyware profile.

Above are all helpful to block malicious sites.

And if I found a bad dns query, is there any way to create custom dns block lists?

Possible to edit 600 already created security policies in bulk to add virus/spyware/url profiles?

I was hoping not to have to edit each rule separately. Does anyone know a way to do this?

PanGP- Connection verification

Hey guys,

Anyone has had this issue with GP?

The PanGP virtual NIC is making a "connection verification" for "ages" and nothing happens.

I have made a workaround to solve this problem but would like to know what is the reason for it.

Of 100 clients, I ha

User loses privileges...UserID

In our company we have two internet browsing profiles.
Users who belong to the AD Domain users have limited access to internet and users AD group belongs to UsuariosInternet can access anywhere.

My AD user is canopr and I have internet access from my P

URL Filtering 4183 blocking Yahoo Mail as Phishing ?

Anyone else getting this ? Obviously a false positive. I have to say the URL filtering database leaves a lot to be desired.

Cleaning obsolete firewall rules

Hi all,

We have recently migrated from Juniper to Palo Alto firewall and there are numerous firewall rules that are obsolete and potentially a security risk to me. I tried to use "highlight unused rules" button but it does not seem consistent to me. A

Is it possible to fetch the user account name instead of user login name from AD?

Hi All,

In our AD user names are in alphanumeric eg: che121, che122 , che124 it is very difficult to identify the exact user. In this case is it possible to fetch the account name instead of user login name. Because account name is the real name of th

Blue Coat Cloud Service Integration

Hi all,

I have some experience with PAN firewalls and I have found a new challenge (the new challenges never stop...).

We are going to integrate some offices with the "Blue Coat Cloud Service".  This integration requires to build a ipsec vpn with the B

What's the difference between custom URL filtering in security policy and in URL filtering Security Profile?

Hello, Guys, I have one question.

First below is the packet flow from "Packet Flow.pdf" document. According to this document ...

In the red square, before PA make session table, it checks packet's ip and port (like the legacy L4 firewall), and then aft