General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

URl Filtering Security policies

In URL Filtering Security Profiles, there are a few actions that can be configured for each URL category.- Alert – permits access to the category and logs it- Allow – permits access to the category, but does not log it- Block – blocks access to the category and logs the access attemptCan you confirm that “block” always...

Detecting Data Patterns in Large Files

A question came up in class today in regards to Detecting Data Filtering Patterns in Large Files. Does the firewall buffer the file being inspected by the Data Filtering Patterns so that it can detect all occurrences of the Data Pattern before sending the file out of the firewall? Or would the recipient get a truncated version of the file sinc...

Resolved! Adding Users to a Security Policy

I have agentless User-ID setup on my PA-500 (Software is 5.0.4). I can do the command "show user ip-user-mapping all" and see a list of user accounts associated with IP addresses (not all of them in the domain, but I'm assuming that it's just what has been seen through the Security Logs on the domain controllers). I've set up the Group Mapping...

User activity reports

I'm getting a bit of a funny one on my Panorama. When I run a pdf UAR for a user using the "last 30 days" option - I only get the detailed reports on web activity from the 2nd of August till the 16th of August. When I change the date option to the last 7 days I get from the 16th till today. Anyone any idea why I'm not getting the full 30 days wh...

Resolved! Skype false positive

Hello guys,About skype: how to know, when users realy use skype and when PA detects only false positive? Because now i have lot of log with "secure.skype.com" URL and PA detects it as skype application.. I would be grateful for an explanation.

Resolved! Product Support

Hello,I'm wondering what 3rd parties offer support for PA?In addition, what does it cost to get direct support from PA as opposed to a third party?Thanks,Chris

Resolved! Global Protect for ios/android

Hi,What are the reasons to use Global Protect Gateway license (for software at markets) instead of Xauth for ios/android ?Can someone tell all of them?Thanks.

Resolved! VM-Series-L2 firewall configuration?

Hi,does anyone have VM series configured like L2 firewall (intra-host communication) and well working?My interface ethernet1/4 is configured like L2 and have leg to portgroup (vlan xx) glued to zone abcd....Polices was created in way to deny SSH between zones abcd to abcd and allow other traffic, but SSH pass anyway from one guest vm to another ...

Cisco Systems VPN Adapter

Hi,I see there is now support for Cisco Systems VPN Adaper however I am trying to figure out what exactly is supported am I now able to connect to the firewall via cisco IPSEC VPN from the Cisco VPN Client software or is this support for something else?I ask as we have engineers that connect to many sites and global rotect is not geared this way...

PA-200 SAP router dropping tunnel

We have a PA-200 (running OS 5.0.4) being used as an SAP router. NAT translating between an inside 17.20.x.x address and an outside static global address (IP = a.b.c.d) which pushes all traffic to its VPN peer IP e.f.g.h. When a completely new session is initiated all goes well with phase 1 (time = x) and phase 2 (time = 6x) being accepted. Howe...

Resolved! Sharepoint Zone/ Policies

We are in the planning of creating a SharePoint Zone on the PAN. The PAN is our perimeter Firewall. Currently we use a proxy to do URL rewrite, but our SharePoint deployment is all internal. We have extensive ACLs in place for access to SharePoint and from the SharePoint server to the rest of our network. We will be dividing our SharePoint to ...

Troubleshooting device with orange status light

Greetings all!I have a pan200 with an orange status light. Power, fan and temp are all green. Status stays this way through reboots and the web server on the mgmt port is not responding.If I console in, the only issues I have seen so far are the TP licenses just expired. I would love some pointers are troubleshooting commands to run to figure ou...

Reports on QoS?

Is it possible to build reports for QoS? I don't see any values that make sense in the report options.Or is it possible to increase the timeframe on the QoS Statistics page? 2 minutes isn't very long to watch traffic.I have a QoS rule that only runs late at night and it's difficult to know if it's even working.Mike

Migrating exchange

Hi,We are trying to migrate the users from Exchange 2003 to Exchange 2010. To do this migrating the traffic go thorugh palo alto but when i start the migration i receive this error "MapiExceptionNetworkError: Unable to make connection to the server. (hr=0x80004005, ec=2423)" in the server. It sound like there is a communication pborblem between ...

Resolved! how to get the logs or chart for QoS ?

Hi All,.How to get logs for QoS in monitor tab.Example: i have defined QoS for Skype application, and want know the effect of QoS on that particular application.Regards,Gururaj

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

URl Filtering Security policies

Detecting Data Patterns in Large Files

Resolved! Adding Users to a Security Policy