General Topics

LDAP (Active directory) Authentication for administrators

Hi,Im trying to configure my PA to validate with my AD to can manage it. I have create a group in my Active Directory called (com_cos), this group has the user to manage the PA. I have add this group in Group mapping and Authentication profile (Allowlist) but it seems like the PA has any problem with the group in AD.This is output error: User 'c...

Management Interface Traffic to Port 135

Hi All,I have a query regarding a management interface which is showing a lot of traffic (several times a minute) from the management interface to various IP's on port 135. Has anyone seen this before? Why would the management interface be sending out so many requests?Thanks,Andrew

NFS times out after 60 minutes

NFS times out after 60 minutes even when setting allow all ports between servers. Before that the NFS protocol got it's session timeout increased to a few days, but it would still timeout after 60 minutes. iptables did not have this problem with the same two servers and nothing has changed other than replacing iptables with a PAN.

Overlapping Vwires - is it possible?

Got a situation where the deployment requires (in very basic terms):VWIRE1 = Ethernet1/1 and Ethernet1/2VWIRE2 = Ethernet1/2 and Ethernet1/3Now this is not exactly 'standard' practice - but is it possible?

Resolved! What happens to my custom App-ID values when PANW modifies a signature?

If I customize an App-ID Risk, Session Timeout, TDP Timeout or UDP Timeout value in an application signature and PANW modifies that application signature, what happens to my custom values upon installing that new App Update?

In what partition is PANOS stored?

Where are the PANOS images stored on the hard disk & how much storage space is allocated for the images?Shared with Jive Anywherehttps://live.paloaltonetworks.com/search.jspa?q=where's+panos+stored

PAN 3020 only support PAN DB URL Filtering?

Hi,We had purchased PA 3020 and it comes with v5. Currently the URL Filtering is PANDB, is there any possibility to convert to BrightCloud URL filtering?It seems that there isn't any trial license available for PA3020 for Brightcloud URL filtering, and there isn't any content for us to download.Will there be a possibility in the future, that the...

Resolved! Packet Capture Mgmt Interface?

Is it possible to packet capture traffic on the management interface using the Monitor->Packet Capture feature?Mike

PAN-DB & Bluecoat Webfiltering category mapping?

Hi all!Do you know if exists any document with the PAN-DB & BC WF caterogry mapping?Thanks in advance,

Resolved! SNMP v3 with DES

Is there a way to configure the firewall to use SNMP v3 with DES encryption instead of AES?-Mike

Resolved! How to use Wildfire for Android APK

I found following new press release:Palo Alto Networks WildFire Protects Against Cyber Threats Targeting Android Smartphones and TabletsI have PaloAlto device with Wildfire subscription.The device is running on PANOS 5.0.6.How can I use this new wildfire?Does it mean I just change configuration of File Blocking to upload .apk files?If someone kn...

Resolved! acc top source destination

Hi,When we look to ACC tab top source or top destination is not seen.When we click over an application and after close it, these top values come.is that normal ?Thanks.

Resolved! Scanning network flow using file name

Hello,Any know an opportunity to scan network flow with PaloAlto to find files by file name? Eg.: i entered "angry tiger" and i find all files (including all file types) with that name sent over the network.

Resolved! File search by hash sum

Hi,Can the PaloAlto firewall search for files using hash sum (chechsum)?

Resolved! interesting PPPoE Problem

Hi guys,i am currently tasked to replace two firewalls we have in the company. The first is a small cisco ASA 5505 for client breakout and a MS TMG(yeah i hate,too) for publishing the Servers.For the first step I am trying to replace the ASA. WAN connection is established via ADSL and PPPoE. The session is build just fine, traffic is allowed via...