General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Unable to ping the ip address assigned to untrust interface.

Anyone can help on this issue? I just set up a new PA 200 device. My problem is i am not able to reach the ip address from outside which i assigned to my Untrust interface. Outbound traffic is ok. I have full access to the internet from internal

...

Is is possible to have a single subnet with multiple gateways to the Internet

If I have hostA (10.0.0.10/24) and hostB (10.0.0.20/24) on the same private subnet, is it possible to have hostA route/forward traffic to ISP gatewayA (1.1.1.1) and hostB route/forward traffic to ISP gatewayB (2.2.2.2) using the PA device?

vpn between nortel and PA-500

Hi All,

I have nortel vpn router 1750 in our main site and PA-500 in the branch, I need ipsec tunnel between devices. Nortel has static IP, but PA dynamic. I found that Nortel has site-to-site, initiator and responder options. which option I have to u

...

Resolved! schedule export system/config logs

Hi,

can we schedule export system/config logs to ftp or etc... ?

Anyone Blocked a specific file from being downloaded?

Hello All,

I am wondering if there is a way to block a specific file from any internet source. We would like to block users from grabbing a specific unsupported browser. (when you have 85k+ workstations - you need to keep them uniform for supporta

...

Resolved! page cannot be viewed properly

Hi,

There is a web page that cannot be viewed properly because of ssl decryption.Decryption is made for gmail applications by using custom url

Is there a way to fix that without disabling ssl decryption ?

Resolved! DHCP Server Delay

Hey all,

Has anyone ever encountered a delay when the PA is handing out DHCP? I have a test network setup to do some captive portal testing for our guest network and I'm noticing it's taking anywhere between 5 - 25 seconds to get an IP address. Wire

...

Resolved! Threat Log filter by 'Name' field

I've got a potential client that is trying to filter the threat log by the threat 'Name' field. He wants to see all from a specific threat.

Normally you click on the item and it puts it in the filter bar but here when you click on the name you get a

...

icmp redirect support

Hello,

simple question:

Does PA devices send / support icmp redirect ?

Use case:

PA device is the default GW for local LAN subnet (A).

PA device has a route to an another subnet (B). The next hop is on his LAN Interface.

Local Clients devices has only a de

...

Resolved! Licence problem with Iphone/Android GlobalProtect client

Hi,

In our university, we have two PA-5020 (PANOS 5.0.5) with VPN service configured in actif/passif mode.

We don't have gateway and portal licences activated, as we only need one GlobalProtect portal and one GlobalProtect gateway.

Users with Windows or

...

How GP selects between SSL and IPSEC?

Hi,

I have recently noticed that most of my VPN users with Global Protect are connected with IPSEC.

Before that, two or three weeks ago, they were mostly connected with SSL.

How can it be like that?

Is it related to some parameters on our PA-5020 (PAN-OS

...

Resolved! Trying (still) to understand Wildfire

I got two files sent to me for analysis and I ran them through Wildfire to get a verdict...

Unfortunately im still not comfortable with what Wildfire thinks is a malware and what me (and obviously the rest of the world) belives is a malware...

Could pe

...

User ID from eDirectory, multiple IPs per user

Hi,

for identifying users on an PA-3020 with PAN-OS 5.0.5 I use a combination of reading the information from eDirectory, XML-API and captive portal.

I am now facing the problem that users which use different computers at the same time with their user

...

Is there a log filters quick reference?

Resolved! Panorama 5.1 on VMWare Workstation 9.0

Has anyone got it to work?

I need to prototype a configuration for a customer who wants to move to 5.1, and all I have access to is VMWare Workstation 9.1. I thought that would not be a problem, but perhaps it is? I'd be working within the 30 day tria

...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free