General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Same traffic traverses the firewall twice.

I will try to draw this out the best I can and then ask my question.

Remote Site (zone is trust, vrouter2, tunnel.1) <<>> Core network (zone is trust, Interface 1/10, vrouter2, layer3)

Rule for this is any, any in both directions.

The above is how all

...

Resolved! GlobalProtect Portal konfig update on Windows

Is there a way to force an update of the GlobalProtect configuration on a windows agent?

I`m testing different configurations but the client would update the config, probably because of the "Config Refresh Interval (hours)"

Regards

Kristian

iMac updates and traffic monitoring

I have permitted apple-updates and users have confirmed that they are able to perform their updates. However, a user in is unable to perform updates as it appears that he is being blocked.

All our firewall and filtering is carried out by PAN and I am

...

Resolved! Threat search by name

Hi,

If i have just threat name (eg.: Suspicious Content Found in 404 Page). How i can find this threat in a threat log? Is any search by name? Or i need to look all log by my self?

Subtype "4" in Traffic log

PAN OS 5.0.0 on VMWare

I see a lot of subtype "4" in my traffic log. I also see start, end, deny, drop, so I'm sure it's not just a display error meaning one of the listed.

Does anyone know what "4" means?

Thanks

Andre

telnet with EBCDIC encoding

We are having some issues with IBM telnet (tn3270) through a PA-200. The telnet sessions are very sluggish. I had to remove the firewall to restore performance. The telnet is using EBCDIC encoding. I had been specifying a security policy using th

...

Resolved! Access Management page on any interfaces

Dear All.

Iam asking if there is a way to access the management page on another interface with Vwire.

Resolved! Disabling warning messages during commit

Hi,

I get a lot of warning messages during commit, regarding rules shadowing, application dependency, etc.
I've been looking for a way to disable some or all of the warning messages, but with no luck.
Anyone know if it is even possible?

Resolved! logs on PA-2050

Hello everyone ,

I have recently implement pa-2050 at a customer premises. Nine days after the implementation each time when login on the web interface a system alarm just popup saying '' Database traffic exceeds percentage limited '' . Have a questi

...

Resolved! Security Policy Rule matches on ALL URL categories

Hi,

I'm sure this was working at some stage but now it's not working the way I need it: I have a rule from inside to outside, any user, web-browsing and a URL category of gambling, allow the traffic and use log forwarding with no profiles selected.

The

...

Not showing dynamic updates for global protect data file even we have licens global protect licens,.

Hi All,

In PA 2050 with PANOS: 5.0.0 not showing dynamic updates for global protect data file even we have global protect license.. Showing nothing, Kindly do the needful as we need to configure HIP profile for SSL connection.

Thank you,

Gururaj

QoS (bandwidth) VPN site-to-site tunnel?

Hi all,

I am trying to understand the QoS feature of the PAN-2020 and was wondering if I could get some assistance. We have a VPN site-to-site tunnel and the data center we are tunneling to is a 10 Mbps connection we can burst up to (10 Mbps being th

...

M86 Migration Experiences

I may be starting a migration soon that includes migrating URL filtering from an M86 to PAN.

I'm trying to get up to speed on the M86 (haven't used it before) and wondered if anyone had any hints, recommendations or "gotchas" to watch out for.

Current

...

Resolved! Mismatch of static-ip source translation address range between original address and translated address

What exactly does this error mean?

Error: nat rule 'ipCentrix Outbound': Mismatch of static-ip source translation address range between original address and translated address

I get this error during commit.

I'm trying to:

Change the Source Address to 66

...

What should I take on deployment PANOS (4.1 or 5.0)?

Now, I have a new project to implement paloalto firewall on my site.

Do you have any suggestions or ideas to deploy PANOS 4.1 or 5.0.

Can you please recommend me?

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free