Juniper ScreenOS VPN to PANOS

I have a Juniper firewall with ScreenOS 6.2 that I am attempting to build a LAN to LAN VPN tunnel to a PAN firewall with 4.1.10.

A quick overview of my setup. We have to frequently setup networks that are "mobile" for company meetings or whatever. We

Is it possible to enable DHCP-Server on Management Interface?

Hi, I would like to know, if there is a way to enable DHCP-Server on management interface? We are using another interface for management so we could enable DHCP-Server on the dedicated management interface. In case of need we can establish a physical

Dynamic updates download but not install on HA

We've got an HA pair of 5050s.  They both have a job to download and install dynamic updates at 12:00 AM.

I've seen occasions where one of the boxes will download but not install the update.  They are also set to push a version of the update to the HA

Approach to manage FTP

Based on recent research by Palo Alto there appears to be a greater emphasis needed  on managing FTP.  What approach have you found  most easily to deploy?  The two options I can think of are:

1. Controlling who can do FTP

2. Only allowing FTP access t

Custom URL Filtering

Hi All

I am trying to get customer URL filtering working and it's not making much sense to me.

What I need to do is protect the Exchange server by allowing only connections to OWA and not ECP etc.

I've created a Customer URL Category called 'OWA Sites'

LDAPS TCP-636 shows as SSL

Im creating a rule base to limit port access to a Domain Controller in a DMZ. I want to allow TCP/636 (or LDAPS) to this server as well as a group of other applications.

The only problem is that there is no LDAPS application defined. The application L

Next Generation Performance Testing for NGFWs

I found this video last day which might be interresting for some of you:

http://www.youtube.com/watch?v=yxdJNK2YAQU

"

Next Generation Performance Testing for NGFWs

Published on Mar 27, 2013

In this video, Jerish Parapurath, Sr. Technical Marketing Manage

Tftp brightcloud databese issue

Hi,

We tried to upgrade brightcloud version using seed file on support with tftp.

After sending file successfully, when try to install it gives an error like :

Error decrypting BrightCloud database: This image doesn't meet authentication requirements.

IPS Evasion

So are the techniques used in the following article realistic?

http://www.sans.org/reading_room/whitepapers/intrusion/beating-ips_34137

Palo Alto's PAN-OS 5.0 made it a bit harder, compared to the others at least.