Dynamic update internal firewall
Hi all,We have an internal firewall that does not have no Internet access. I wonder what is the best way and best practice in updating the IPS / AV signature (no URL filtering).Any recommendation?Thanks
Hi all,We have an internal firewall that does not have no Internet access. I wonder what is the best way and best practice in updating the IPS / AV signature (no URL filtering).Any recommendation?Thanks
Is it possible to configure remote vpn client access without a Global Protect Gateway license? It seems that remote client vpn configuration depends on HIP Objects/ Profiles, which in-turn requires Global Protect licensing. Is there a way to configure ip-sec for remote client access? The ip-sec/ ike configuration options seem relevant to site-to...
Hello all,I have a (working) Global Protect Portal+Gateway envrionment. I am now trying to setup a gateway in a second datacenter. I have setup the same GP-cert and Client-Cert, cert_Profile and GP Gateway settings. The gateway works, when setting a portal on the second datacenter machine and logging on through it, but not when using the origina...
There has Dynamic Block Lists to block unwanted IPs.And there has DNS signature in Anti Spyware profile.Above are all helpful to block malicious sites.And if I found a bad dns query, is there any way to create custom dns block lists?
(Think I know the answer to this already but...)Panorama 4.1.14We have a NAS that I would like to push automated exports to from Panorama. I would like to ftp export to a specific path (we don't use user Home paths) but can't seem to do it. Only the hostname is allowed. I gather SCP via the CLI would allow me to do this but I think not in an aut...
I was hoping not to have to edit each rule separately. Does anyone know a way to do this?
We are seeing issues with Google ssl traffic being identified as Ultrasurf. Problem went away when we backed out the update (which included updates to the ultrasurf application definition). Ticket is into Support. May want to avoid updating to 396 for now.Phil
Hey guys,Anyone has had this issue with GP?The PanGP virtual NIC is making a "connection verification" for "ages" and nothing happens.I have made a workaround to solve this problem but would like to know what is the reason for it.Of 100 clients, I have about 20 having this problem.We aren t using any Proxy.//Ron
In our company we have two internet browsing profiles.Users who belong to the AD Domain users have limited access to internet and users AD group belongs to UsuariosInternet can access anywhere.My AD user is canopr and I have internet access from my PC (10.5.1.149), when I log on to a server by remote desktop (mstsc) and I identify with the user ...
Anyone else getting this ? Obviously a false positive. I have to say the URL filtering database leaves a lot to be desired.
Hi All,is it possible to exclude traffic and threat log from exporting to syslog server ?Just i want to forward only system and configuration logs to syslog server instead of sending all the logs.Thank youGururaj
Hi all,We have recently migrated from Juniper to Palo Alto firewall and there are numerous firewall rules that are obsolete and potentially a security risk to me. I tried to use "highlight unused rules" button but it does not seem consistent to me. Are the highlighted rules unused since the firewalls start running or simply not currently used at...
HelloIs there a difference between the Globalprotect msi files you can download from the software support site and the Globalprotect msi files you can download from your own Globalprotect portal ?The reason why I ask: I'm testing deployment of the GP client through Group Policy. I've noticed after installation, sometimes the portal address is no...
Howdy,How do most of you manage situations where App-ID updates break functioning rules? This just happened to me: I have Lync 2010 and the internal clients need to connect to the edge server. I had a rule in place that allowed ms-lync, ssl, and stun. That worked fine until last weeks update (396), at which point ssl was now identified as "ms...
The Status let is in orange, the console port is working but none of the network ports work. Any suggestions?
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 3 | |
| 2 | |
| 2 |

