Anyone got GP to work with OSX 10.9? Do we need to wait for an update?Thanks,E
Hi,I want to create a report based on the predifined canned report HTTP Applications. I have tried loading it as a template and it doesn't show up in the list of templates. I have also found it in the CLI as top-http-applications the output of which is below. However when I try and create a report in the CLI based on this there is no option f...
HiI moved my email serwer from untrust to DMZ. Everything almost is working fine, almost ...This server has ftp and webmail function too, so my security rules looks:I checked on aplipedia for aplication smtp and pop3. Accroding to aplipedia smtp uses tcp/25,587 and pop3 tcp/110.Thats true for on secure connections. But how _properly_ pass SSL t...
Hello Guys,Have anyone of you noticed something regarding torrent(bittorrent, transmission..etc..)?We received a report that a torrent app which is transmission is able to evade the app detection of Palo Alto NGFW.I tested it in my lab, I use Bittorrent and I saw that it can really breach Palo Alto NGFW and successfully downloaded a file.We trac...
Hello,Does anyone have a document confirming the expected behavior from PANOS 4.1 regarding the TCP Sliding Window checks when the L7 scan is completed (hw session offload) for TCP session?Thanks
Any one know the best what to migrate this configuration from a Cisco ASA 5505 to a PA 3020 here it show run information for the interfaces from the ASA 5505interface Ethernet0/0 switchport accessvlan 900 !interface Ethernet0/1 switchport accessvlan 300 ! interface Ethernet0/2 switchport trunkallowed vlan 1,999switchport trunk native vlan...
HelloI made a CSR. Got my Cert and did the stuff mentioned in the "how to chained certificate", Copied the intermediate on top of my cert.but the PA-500 did not accept it. okey i tried it without the intermediate cert text - and it worked. Request is gone and now there is a valid cert.but now when i try to open the captivePortal Response page i ...
Hello all,Yes its youtube again, for a while now youtube has been working fine since we turned on the safety-mode feature and forced students to select safe-mode.But this week they have been complaining that not all the videos work.I have looked at the logs and there are some videos that have a url at googlevideos.com and these are using the goo...
HelloI have made qos configuration. I have questions when am checking qos.Look at the following commandshow qos interface ethernet1/1 hw-counter qid name pass bytes WRED drop policing drop--------------------------------------------------------------------------------0 default 3408809811 0...
Has anyone been able to successfully set up captive portal +Apple iOS devices + client certificates? I have all of this set up but running into a slight issue with iOS devices(works fine with Windows devices). On the iOS device, when opening the Safari browser to get it to auth to captive portal, I get the pop-up that asks me to select the cert...
I have been researching Dynamic IP NAT, and have found the option to configure Dynamic IP address pools to reserve IP addresses for translation. Taken from "Understanding and Configuring NAT Tech Note":Reserving IP AddressesDynamic-IP address pools can be configured to reserve IP addresses for translation. By default, the IP reservation setting,...
HelloI am facing packet drops whenever the phase 1 re-negotiates. The SA gets expired and deleted but it takes 20 minutes for it to start the P1 phase again. In that period the traffic times out until the P1 starts again after 20 minutes. Below are the logs. I have replaced our gateway address with xx.xx.xx.xx2013-11-05 10:24:02 [INFO]: ====>...
Hi all,I have a question regarding URL filtering. I set up URL filtering in Security Profiles to "Continue" for Social Networking. I noticed that if i open the first site under social networking, i get the response page "to continue", after that if i open the 2nd social networking i do not get any prompt, it just opens. And the same for any web ...
I was wondering if there is a way to resolve domain names on a Palo Alto (except ping) and not using a DNS proxy object.Kind regards,Bob
Heyjust trying to figure out and play with QOS for understading on how it works for ferther implementaion of QOS policyso my environment is PA-500 with 2 interfaces in VWireethernet 1/11 - vsys3-untrustethernet 1/12 - vsys3-trusthave my computer connected to vsys3-trust (eth1/12)i have configured 2 QOS profiles one for outbound QOS and one for i...
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
| Subject | Likes |
|---|---|
| 7 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
