General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Strange logs

Hi all,

Does anybody know what this logs mean ??

2013-08-23 12:50:14 [PROTO_NOTIFY]: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=a779fc43d8e05d1d 9af0ad6c1e566bdf (size=16).

2013-08-23 12:50:14 [PROTO_NOTIFY]: notification message 36136:R

...

I am trying to update the content (application and threats) on our PA-500 firewall running version 4.1.8-h3. However, this is failing, and am getting the message below. Any ideas on how this can be fixed?

Operation

Install

Status

Completed

Result

Failed

...

Can i block file by file name?

Hi,

so, can i? Eg.: i want to allow upload/download .pdf files, but block "hacker tutorial.pdf" file. How i can do that?

Resolved! Packet capture in traffic log

Hello,

i have a hundreds pages of traffic log, how can i find captured packets? Searching for green arrows manualy is annoying, can i somehow use some filter or something?

Dynamic Block Lists and IP's

I saw this line in an article about Dynamic Block Lists.

"as our threat team identifies malware, they automatically take any URL or IP associated with that threat and will include it as part of the PAN-DB URL filtering database. "

Does this mean that t

...

Panorama Template conflicts with base device config

I am in the process of building out my Device Groups and Templates to standardize configurations across all sites. Our sites are standardized in a way that we can actually apply device configurations across multiple sites. After the base templates ar

...

URl Filtering Security policies

In URL Filtering Security Profiles, there are a few actions that can be configured for each URL category.

- Alert – permits access to the category and logs it

- Allow – permits access to the category, but does not log it

- Blo

...

Detecting Data Patterns in Large Files

A question came up in class today in regards to Detecting Data Filtering Patterns in Large Files. Does the firewall buffer the file being inspected by the Data Filtering Patterns so that it can detect all occurrences of the Data Pattern before sendi

...

Resolved! Adding Users to a Security Policy

I have agentless User-ID setup on my PA-500 (Software is 5.0.4). I can do the command "show user ip-user-mapping all" and see a list of user accounts associated with IP addresses (not all of them in the domain, but I'm assuming that it's just what h

...

User activity reports

I'm getting a bit of a funny one on my Panorama. When I run a pdf UAR for a user using the "last 30 days" option - I only get the detailed reports on web activity from the 2nd of August till the 16th of August. When I change the date option to the la

...

Resolved! Skype false positive

Hello guys,

About skype: how to know, when users realy use skype and when PA detects only false positive? Because now i have lot of log with "secure.skype.com" URL and PA detects it as skype application.. I would be grateful for an explanation.

Resolved! Product Support

Hello,

I'm wondering what 3rd parties offer support for PA?

In addition, what does it cost to get direct support from PA as opposed to a third party?

Thanks,

Chris

Resolved! Global Protect for ios/android

Hi,

What are the reasons to use Global Protect Gateway license (for software at markets) instead of Xauth for ios/android ?

Can someone tell all of them?

Thanks.

Resolved! VM-Series-L2 firewall configuration?

Hi,

does anyone have VM series configured like L2 firewall (intra-host communication) and well working?

My interface ethernet1/4 is configured like L2 and have leg to portgroup (vlan xx) glued to zone abcd....

Polices was created in way to deny SSH betw

...

Cisco Systems VPN Adapter

Hi,

I see there is now support for Cisco Systems VPN Adaper however I am trying to figure out what exactly is supported am I now able to connect to the firewall via cisco IPSEC VPN from the Cisco VPN Client software or is this support for something el

...

Discussions