General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! How to use Wildfire for Android APK

I found following new press release:Palo Alto Networks WildFire Protects Against Cyber Threats Targeting Android Smartphones and TabletsI have PaloAlto device with Wildfire subscription.The device is running on PANOS 5.0.6.How can I use this new wildfire?Does it mean I just change configuration of File Blocking to upload .apk files?If someone kn...

Resolved! acc top source destination

Hi,When we look to ACC tab top source or top destination is not seen.When we click over an application and after close it, these top values come.is that normal ?Thanks.

Resolved! Scanning network flow using file name

Hello,Any know an opportunity to scan network flow with PaloAlto to find files by file name? Eg.: i entered "angry tiger" and i find all files (including all file types) with that name sent over the network.

Resolved! File search by hash sum

Hi,Can the PaloAlto firewall search for files using hash sum (chechsum)?

Resolved! interesting PPPoE Problem

Hi guys,i am currently tasked to replace two firewalls we have in the company. The first is a small cisco ASA 5505 for client breakout and a MS TMG(yeah i hate,too) for publishing the Servers.For the first step I am trying to replace the ASA. WAN connection is established via ADSL and PPPoE. The session is build just fine, traffic is allowed via...

Resolved! GMAIL Base and SMTP - WTF??

Folks.The latest content update (pushed today, my time) gave me the following warning in the task when I installed itVSYS1: Rule 'Outbound_Traffic' application dependency warning: Application 'gmail-base' requires 'smtp' to be allowed, but 'smtp' is denied by rule 'Outbound_Bad'WTF? Since when does GMail require SMTP? The local installations don...

Invalid threat ID number, next steps

In the threat logs, the PAN is detecting a virus for internal traffic, server to client, but the threat id doesn't match anything in the threat vault, 1 number too short, 253879. What's the best way to identify if the threat is legitimate, not a false positive? application = ms-ds-smb, url LogoinScript.VBS

Same traffic traverses the firewall twice.

I will try to draw this out the best I can and then ask my question.Remote Site (zone is trust, vrouter2, tunnel.1) <<>> Core network (zone is trust, Interface 1/10, vrouter2, layer3) Rule for this is any, any in both directions.The above is how all remote traffic flows. (all traffic hits the core)Core Network <<>> interf...

Resolved! GlobalProtect Portal konfig update on Windows

Is there a way to force an update of the GlobalProtect configuration on a windows agent?I`m testing different configurations but the client would update the config, probably because of the "Config Refresh Interval (hours)"RegardsKristian

iMac updates and traffic monitoring

I have permitted apple-updates and users have confirmed that they are able to perform their updates. However, a user in is unable to perform updates as it appears that he is being blocked.All our firewall and filtering is carried out by PAN and I am usually view traffic from a user's PC computer and figure out what is being blocked by the one of...

Resolved! Threat search by name

Hi,If i have just threat name (eg.: Suspicious Content Found in 404 Page). How i can find this threat in a threat log? Is any search by name? Or i need to look all log by my self?

Subtype "4" in Traffic log

PAN OS 5.0.0 on VMWareI see a lot of subtype "4" in my traffic log. I also see start, end, deny, drop, so I'm sure it's not just a display error meaning one of the listed.Does anyone know what "4" means?ThanksAndre

telnet with EBCDIC encoding

We are having some issues with IBM telnet (tn3270) through a PA-200. The telnet sessions are very sluggish. I had to remove the firewall to restore performance. The telnet is using EBCDIC encoding. I had been specifying a security policy using the application telnet. When I get a chance I will change that to service port 23 and test again. ...

Resolved! Access Management page on any interfaces

Dear All.Iam asking if there is a way to access the management page on another interface with Vwire.

Resolved! Disabling warning messages during commit

Hi,I get a lot of warning messages during commit, regarding rules shadowing, application dependency, etc.I've been looking for a way to disable some or all of the warning messages, but with no luck.Anyone know if it is even possible?

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!