General Topics

Install of Panorama AND importing configs from existing 3050's

GreetingsWe already have our HA pair of 3050's installed and running in the network. We now have (after the fact) purchased Panorama in order to manage an upcoming DR site as well as the existing pair. Has anyone attempted to import configs into Panorama from existing configs on 3050's (running 5.0.8) and completed it successfully? Or is this go...

avoid threat: PHP Webshell Access(36180)

How to avoid this threat: PHP Webshell Access (36180). From Zone Trust, Zone to Untrust.Thank you,

Performance capabilities of Palo Alto 3000 Series Firewalls

Hello, We are currently building out our network infrastructure for a new office and have a question regarding the capabilities of the PA 3000 series firewalls. We want to use to be able to use two PA in high availability mode (active-passive) to do our routing, DHCP for different vlans, antivirus filtering, web filtering, vpn, potentially vlans...

WildFire license expiration

Hi,If the WildFire license expires, what happens to a PE file if a file blocking profile is already set to forward?Thanks

Adding 2nd External IP range to firewall

Hi,We have a set of external IPs and a virtual router setup with a default route of 0.0.0.0/0 going out though an address in the External range which is our ISP routerWe're adding another /25 range of External IPs to the router (different subnet completely from previous IP range). How do we get the firewall to use these?Thanks

6.0 code

Does anyone know if there is any documentation released yet around the 6.0 code?Thanks in advance!

Resolved! How to get number of web site hits

HI,I need to get the numnber of hits going out to maps.google.com via PaloAlto.How can I do this?Shayan

Resolved! Rule change via CLI

Is there any way to remove a parameter to a security rule via the CLI? As an example, if I created the following rule:set rulebase security rules "Test" from insideNow I want to change inside to outside.If I use: set rulebase security rules "Test" from outside, I end up with "from [ inside outside ]"I would prefer not to have to delete the rule...

URL and Page Content Pattern Matching for Un-categorised Websites

Hi,Unless I've missed something I don't believe this is yet possible. I'd love to be proven wrong however so by all means let me know.We are seeing an increased number of highly personalised phishing attacks i.e. the individuals behind the attempts are setting up identical login pages to our sites with our graphics etc in an attempt to fool our ...

Resolved! EIGRP?

I probably already know the answer to this, but I have to ask anyway. Does PA support EIGRP for dynamic routing? :smileyconfused:-mike

Resolved! Best Practices for Agentless UserID in Multiple Domain Environment?

Hi,I'm about to install two PA5060s in high availability and I am wondering if you guys have any best practice tips for this kind of install when it comes to UserID and how to add more than one domain to the Agentless install.Alex(Now shamelessly accepting the next 72 friend requests.)

Resolved! Palo Alto Migration Tool

I watched the webinar for Migrating Cisco ASA to PAN at this link https://paloaltonetworks.com/resources/webcasts/migrating-from-cisco-asa-to-palo-alto-networks.htmlAround the end of the presentation, there's a few slides on migration tool used to migrate other firewalls to PAN.Does anyone know where to get the tool?Thanks

Resolved! IMAP SECURE /POP3 SECURE applications

Hello ,We are looking for IMAP Secure and POP3 Secure application to securely access the mail exchange services from Internet through PA firewall , we do not find this in this applications list .can you please advice .Regards,BIJILESH.

Resolved! Different NAT IP for several user

HiI need your help with following problem.Traffic from VPN zone is NATed to one public IP for every VPN traffic.Today I got task to assign for 3 of those user different NAT IP (or even better: user1 - NAT_1, user2 - NAT_2, user3 - NAT_3 and for the rest of users NAT_4)How to achieve that?RegardsSLawek

Resolved! Specify policy by machine name/workgroup?

Hey there --So this is an odd thing that's probably it simple fix.. hoping anyway. We have 99% of our PCs on the same subnet and domain, however several of these machines are owned by an outside company and are "borrowing" our internet link. They are in their own workgroup (not on our domain), but share our address space (192.168.1.x/24). I ...