General Topics

PanOS 5.0

i have configured syslog setting on palo alto to send log to syslog server?i have mention the port number 601(tcp port) and server address : xx.xx.xx.xx and facility : LOG_USERbut i cannot see the log on my syslog server which is listening on tcp the port.Does palo alto support forwarding event to syslog on tcp port?

Resolved! How to check wildfire log qoatos on firewall with PanOS 5.0

Hi All,I would like to check the system quoua of wildfire, however I use command >show system logdb-quota , it just shows disk usage not quota.Anyone knows how to check it? Thanks.Regards,Joy

Resolved! application ver 390

Hi,We informed that 390 was released but I could not find it on dynamic updates.Any problem with that version ?we had some ssl problem but I don't know if it is related to that or not

Resolved! Maximum number of addresses...

I just ran into an error trying to push a config to a 5020 where I exceeded the maximum number of addresses per group for the specific model.Where could I find these maximums?Thanks.

Resolved! JS/Exploit.pdfka.iiq (280954)

Is anyone else seeing this Virus threat ID trigger? It appears to be a false positive, but I cannot find any description in the threat vault.

Any defenses against slow HTTP Post DOS?

http://www.darkreading.com/vulnerability_management/security/attacks/showArticle.jhtml?articleID=228000532&cid=nl_DR_daily_2010-11-02_htmlJust wondering if there is anything our PA can do to protect from this kind of exploit?Jim

I have problems uploading files larger then 2709 bytes with FTP since install release 388

I have a PaloAlto firewall PA-2020 with Software version 5.0.3. Since the installation of 388 Application version on 13/08/2013 that FTP protocol blocks uploading files larger then 2709 bytes. I'm using filezilla application for uploading files.ThanksFilipe Duarte

Mngmt CPU Raises %51

Hi All,My PA5060 mngmt CPU raises %51 around and after a few mins later it goes down to %10 but it's happening oftenlyI think it's not normal and i want to solve this problem or i wanna learn what is/are the reason about this issue. Can anyone help me please? Thanks. Software version: 5.0.4

Resolved! Management CPU still an issue

Yes, it's that time again.I'm still seeing issues with the management CPU spiking despite my recent upgrade to the 5.x stream of software.The image below shows the last 24 hours of the Management CPU on my active PA2020Notice the regular spikes to roughly 60% utilisation - sure, the *average* is low (ignore the 80% spike - I upgraded to 5.0.6 th...

Office 365

Hi,I have a PA-500 with url and threat license and i need to manage office 365 traffic (redirect to a dedicated wan connectivity and manage bandwidth).I need also to track and report the amount of Office365 traffic.I haven't finded the application on the application list and traffic is detected as ssl.What i must do to accomplish my goals?

session id and information

Hi,When we look from traffic logs to a session detail and to same session from cli (show session id)we see completely different information except for id(different source,destination,application etc..), I've seen this for many devices different times and different panos versions.When we have this issue how can we fix that except for deleting all...

How to import config from rancid

Hi,We use rancid to take backup of out PA firewalls. The config saves as clear text, without xml tags.It this possible to import to a new PA?

PBF vs Static Route

Hi,I have traffic going from A.A.A.A to B.B.B.B,The problem this is working with the static route. But I need to use PBF instead for monitoring reasons. When removing the Static route and using PBF traffic is not reaching the target. I am configuring as follows:For PBF: If the source is A.A.A.A send the traffic to M.M.M.MFor Static route: If the...

Resolved! CLI command to make local device functional in A/P HA configuration?

Hi All,.CLI command to make local device functional in A/P HA configuration?Hi All,.Regards,Gururaj

How are passwords and keys stored in PAN xml config files

Are they hashed before storing them in the config files? By the looks of them, it seems like the PAN appliance is storing them in an encrypted format. If so, can they be decrypted?For example, an OSPF key is stored as follows"-AQ==xxxxxxxxxxxxx=xxxxxxxxxxxxx=="This pattern can be observed in almost all of the keys/passwords stored in the XML con...

Discussions

PanOS 5.0