General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

botnet-domain alert in GUI


Hello,

on the cli show command I see under "XX Anti spyware" profile the botnet-domains policy but I'm not able to find it on GUI under object-securityprofiles -> antispyware.

Where botnet-domain behavior is configured on GUI ?

thank's .. here below the

...

Resolved! Blocking Single URL

Our students have decided it is fun to install the nCage Chrome extension which changes all images on a web page to a picture of Nicholas Cage.  What is the best way to block a single URL from being accessed -- they are installing it via the Chrome W

...

Reverse-Proxy

How can I use  Palo-Alto as reverse proxy. Suppose I have a DMZ zone that has all the web servers and I want the DMZ interface to act as reverse proxy.

The untrusted interface facing the internet would do the NAT translation. Then send the traffic to

...

knesan by Not applicable
  • 4270 Views
  • 1 replies
  • 0 Likes

Sessions aging , scaling , app tricking etc

Hi,

Could someone briefly describe the significance of these values shown in the output for "show sessions info" and how they may be tweaked from a performance perspective ?

-

Session accelerated aging:                       True

  Accelerated aging thre

...

Resolved! App-ID number mapping to App-ID name

Does anyone know how can we get the App-Id name from an App-Id number? We can get statistics of the running App-ID cache ("show running application cache") but i can't find an easy way to map the App-Id number to the App-Id name.

Thanks,

Adriano Carval

...

adcar76 by Not applicable
  • 2611 Views
  • 2 replies
  • 0 Likes

Vulnerability Vs Successful Expolit

Hi,

I would like to know how easy or hard it might be to link a vulnerability to an actual successful  exploit.

The threat details are provided below and a screenshot of the actual threat incident seen in attached. I am assuming this is just a random

...

Local admin accounts on PAN firewalls?

Hi,

We use Panorama to manage or configure individual PAN firewalls. There is however times when we need to connect to the individual firewall for troubleshooting or faster response while monitoring. The Panorama is configure with Authentication Profi

...

Need help in OID

Hi Guys,

            I like to know the exact OID to find interface IP. Using RF-1213 MIB, I am able to find the bytes transferred or up status, how how do I find the IP of an interface using an OID?

Regards,

M.Viswesh

Saravanan by Not applicable
  • 3790 Views
  • 4 replies
  • 0 Likes

Resolved! Hi..~

Hello,,~

I was worried about os update

When I updated pan os ,, Suddenly Device did not process downloading,,


I did check CLI Command

> show jobs prcessed

download 20 % stop,,

and then I tried to wait for a while

but,, Device still did not working about pan

...

How to block Ultrasurf?

Hi guys,

i create a rule to block Ultrasurf on top and a rule to allow any below it. but ultrasurf still can bypass. surprisingly once ultrasurf connected to its server, PAN unable to logged the traffic. No traffic looged in URL filtering, Threat and

...

afiq by L1 Bithead
  • 8552 Views
  • 8 replies
  • 0 Likes

High Ping times on Speedtest.net and slow web browsing

We have been experiencing very high ping times on speedtest.net (6336+ seconds) and very slow web browsing to international websites (National sites appear to be running fast).

(I understand that speedtest.net cheats and sends very small HTML files to

...

jenkinsp by Not applicable
  • 3227 Views
  • 2 replies
  • 0 Likes

Resolved! New Palo Alto User - Dynamic Block List

Hi there,

I just got a new Palo Alto and I would like to load some IPs in a Dynamic Block List.  I have set up a Windows IIS Webserver on an old Server 2003 box with an IP 192.168.1.33  I have the site up and working and anoymous users can connect to

...

dmodien by Not applicable
  • 3979 Views
  • 5 replies
  • 0 Likes

Source user not showing in traffic logs

I have the agentless user-id configured in my PA-500, software is 5.0.4.  If I do a "show user ip-user-mapping all", it retrieves a list of usernames.  However, in my traffic logs (which is currently only limited to a few machines that are running th

...

uscit by Not applicable
  • 15708 Views
  • 9 replies
  • 0 Likes
  • 23560 Posts
  • 106 Subscriptions
Labels