General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Wildcards in URL filtering for SSL-decrypt bypass

OK, so this is driving me mad and I'm obviously missing something.

I've created a custom URL category in which I wish to drop URLs that will bypass SSL decryption.  In this I want to use wildcards, so that all sites for a particular company can be byp

...

dynamicv by L1 Bithead
  • 2525 Views
  • 1 replies
  • 0 Likes

segmentation of bandwidth:

Hi All,

           One of our customers has an internet acces of 20Mbits and 4 types of users so he wants to segment the internet acces into  4  acces in order to ensure that every user groups has a bandwidth of 5Mbits.

           is it possible to do

...

Lahcen by Not applicable
  • 2669 Views
  • 6 replies
  • 0 Likes

Resolved! How Can I create custom application?

Hello Family~

I would like to create custom application,,

but It is hard to do

anyway

recently I red custom application document

about uploading.com

\.   <- why include \ character?

I tried to what could have known where document;;

help me please,,

ipsec-esp / Protocol 50 invisible in vwire mode ?

We have a Vwire configuration with a paloalto (5.0.6) between a third-party router and the wan port.

Security policy is allow any - any for both directions/security zones, log at session start an end.

Everything works (as expected), all VPN Tunnels on

...

register by L1 Bithead
  • 3576 Views
  • 5 replies
  • 0 Likes

Resolved! QoS Egress Max 0 = unlimited?

The default setting when creating a new QoS interface for Egress Max is 0. Does 0 mean unlimited or 0 (no bandwidth, no traffic)?

Mike

mike_cc by Not applicable
  • 6270 Views
  • 3 replies
  • 0 Likes

Content version 390

Hello All,

       In content version 390, the ssl traffic is mis-categorized as private-ip-address as a result, this content version is pulled back. The devices which have already seen the content version 390 will try and install it even if you have r

...

tshiv by L4 Transporter
  • 1353 Views
  • 1 replies
  • 0 Likes

vpn-ssl Global Protect

hello

My problem is that when a user connects to the overall ssl vpn-protect this lifetime login settings in 1 day and the settings I have for inactivity logout is 3 hours and although the user activity during those three hours it off after that time

...

itstrap by Not applicable
  • 2424 Views
  • 2 replies
  • 0 Likes

Resolved! Session Timeouts

So my question is pretty simple.

How are timeouts handled on these devices.  Does it matter if I have rules based on services vs. applications?

We have our global settings on the box set for TCP 3600.  We have rules that are service based and ones that

...

smccall by Not applicable
  • 3673 Views
  • 4 replies
  • 0 Likes

Use x-forwarded- for to apply policy?

Dear all,

I have a very important question and need your fast reply please.

Can I use x-forwarded-for to show the ip address of the coming users behind a proxy and THEN apply policies based on these users?

This scenario intends to apply policies per use

...

gshaker by L1 Bithead
  • 2628 Views
  • 3 replies
  • 0 Likes

Resolved! Webbrowsing on non-standard http ports....

What is the best way for me to implement a rule that allows http traffic over non standard ports?

Our security standards require that we use a feature similar to what is available in Checkpoint that allows us to lock the port down based on protocol. E

...

smccall by Not applicable
  • 3728 Views
  • 3 replies
  • 0 Likes
  • 24035 Posts
  • 102 Subscriptions
Top Solution Authors
Top Liked Authors
Labels