General Topics

nat with port forwarding issue (migrating from MS-TMG)

Hi,when migrating rules from MS-TMG to PAN i have encountered folowing situation:a. web server A is in private dmz zoneb. web server B is in inside zoneBoth are listenig on port 80. Problem is in the fact that both are published on the same public IP address. This is supported on TMG, with some kind of url forwarding but i dont know if PAN can s...

Resolved! Is it possible to create a custom report that mimics Browsing Summary by Website in a User Activity Report?

Community, I'm trying to create a custom report that mimics the browsing summary available under the user activity report but the custom report does not group results the same way. For example, if I have a user visit multiple news stories at www.nbcnews.com, each page will count toward the main URL link of www.nbcnews.com in the user activit...

Resolved! Blocking Spotify P2P function

We want to allow the use of Spotify for our clients, but Spotify does not only download files, but it also shares files through P2P to other users of Spotify.We wish to only allow download/streaming, and we wish to block the P2P upload feature.Please see more information here: Lithium's blogAnyone?

Resolved! User ID Mapping Directly to Firewalls

Good afternoon,Previously we used the PAN-UID perl module to update User ID Agents running on servers, which would in turn update the firewalls.With version 5.0, there is not this capability:2.9 User-ID mapping Beginning with PAN-OS 5.0.0, you can apply User-ID mapping information directly to the firewall using the API with the type=user-id para...

Resolved! what do people search ?

Hi,Is there a way to track especially google searches from url filtering ?From url filtering logs it cannot be seen the same url as a person visit when searches for a word.we need search stats

Unknown Application Packet Capture

HiI want know about Unknown packet capture.Q1. Where is unknown pcap stored? [Device] > [Setup] > [Management] > [ Logging and Reporting Settings] App Pkt Capture ?Q2. I want know Unknown Pcap Usage.Q3. When is capture unknown packet in PA packet flow?Regards,

Resolved! Captive portal not redirecting for some users

Hi thereWe've just enabled Captive Portal for all of our users but I'm getting a small number of users who are simply not being redirected to the captive portal to authenticate. I've noticed that Safari on Mac is a common theme but there are a number of PC users with the same problem.I have a small selection of trusted IP addresses which do not ...

Domain is pointed as Malware

Hello,today we had a suspicious DNS Query warning because we tried to reslove a domain (pandaro.be).So Palo Alto gets information about domains and checks some information about these domeains.My questions about this:1/ What is PA using to decide which status a domain gets2/ What is PA checking at a domain to decide about the status2/ If a dom...

Resolved! link aggregation down

Hi,We configured link aggregation but although switch side ports become up, on PaloAlto they are down.Any idea ?show interface ae1--------------------------------------------------------------------------------Name: ae1, ID: 48Link status: Runtime link speed/duplex/state: unknown/unknown/down Configured link speed/duplex/state: auto/auto/auto ...

vpn issue

Hi,After side to side vpn established correctly after sometime(I do not know how many hours) Phase1 becomes passive.Side1 cannot access Side2.when we try to use test vpn command for ike it becomes up and it works.What can be reason for that ?

how do I assign multiple networks/subnets using only one physical interface?

I have an isp with 4 ip blocks then another with 3 ip blocks. I plug my 2 isp's in a switch then with only one cable from the switch to Palo Alto then from Palo Alto to my local network.What I want to happen is that i can choose what isp i want to use by just changing the ip settings of my workstation.See attached diagram.

VWire configuration testing

Hi,At a recent PA training, the instructor mentioned a testing method for testing the configuration of VWire objects and the traffic flow, as configured in your Security Policy. The goal of this method is the ability to do testing in a lab environment vs. testing your traffic flow after you've put the device into production.With your device in ...

App and Threat Version fail when update.

When I download and install (choose sync HA) the update App and Threat version 386-1889 (2013/07/30), Dashboard in my device show info App Version and Threat Version mismatch (view attach files). And when I commit any change, HA will not work (view attach files). I must rollback to old Version and my device is ok. When I reinstall new update 3...

Multiple ISP load balancing

We currently have an Internet setup as shown in the image below. ISP1 is Metro Ethernet running over a disparate fiber path at 100Mbps symmetrical bandwidth. ISP2 is ATM over 1Gb Fiber, with a disparate fiber path and 250Mbps symmetrical bandwidth. ISP1 and ISP1 are running BGP. I use padding to control my preferred link, which changes depe...

Resolved! ACC and filtering App Category or Sub Category

I couldn't find an answer after searching for a bit, so I thought I'd ask the community.In the ACC tab within the PANOS web UI, if I select an application in the report, within the Application Information section that appears I get links for the App Category and App Sub Category. I can then drop the filter for the Application, and work with the...

Discussions

nat with port forwarding issue (migrating from MS-TMG)