General Topics

Netflow stopped working

I am currently running PanOS 5.0.2 and I'm not sure with which update Netflow stopped but I noticed I am not getting any data as of late. I have Netflow configured to point to my monitoring server on the standard port 2055 and the monitoring software is called Sanforce Packet Trap. Netflow is working on the monitoring software because I also ha...

Resolved! How to do virtual routing for a third ISP (new MPLS)?

We have setup in our PA-500 two ISP interfaces: Primary (eth1/1) is our primary Internet connection, and the Secondary (eth1/2) is our Backup ISP (configured for failover, and this one also is an MPLS connection to another site). Eth1/3 is our private LAN. There are two virtual routers setup for this scenario (also including GlobalProtect confi...

Resolved! VPN IPSEC With Multiple VSYS and admin role

when you create vpn ipsec across different VSYS. if you want to give access to ipesec tunnel only for a specific user in a specific vsys. is it possible?

Resolved! About SCCP

Hi,Does PaloAlto support NAT and PAT for SCCP ?Thanks.

vsys ressource repartition

Hi someone know how the resource is dispatch to the different vsys. if you didn't declare any ressource affectation thank's

Resolved! PaloAlto protocol support

Hi,Can we control all of the protocols with PaloAlto ESMTP,SQL.Net,SCCP, CTIQBE, ILS, SunRPCThanks.

dataplane memory

Hi,There are many commands I searched and found about memory.Is there a command to see dataplane memory usage ?

How to clear application statistics?

Hello guys.As you know that PAN provide a useful command 'show system statistics application' as below.Virtual System: vsys1application sessions packets bytes-------------------------------- ---------- ------------ ------------web-browsing 714739 48658389 40516195699unknown-tcp ...

Resolved! Palo-Alto 500 and Microsoft AD integration

Hi colleagues, Please share and expirience with Palo-Alto and Microsoft AD integration.We need to limit PaloAlto different user groups and individual users if possible.Also, if it is possible to limit the bandwidth for users, groups and applications?BR

UDP port 5001 to 5005 intermittent on PAN5.0.3

hi,Anyone facing UDP traffic intermittent after upgrade from 4.1.9 to 5.0.3? i believe this is firmware issue as when we revert back to 4.1.9 the intermittent issue resolved.any recommendation if we upgrade to 5.0.5?thank you.

Reports based on groups

Hi,When we try to get custom reports by typing a query for source user(domain\group) and run now, it gets empty.when we type user name it is working.Any idea ?Thanks

Resolved! Captive Portal Config Docs - For Redirect Mode

Hello, I have been reading any posts I could find on setting up Captive Portal as I try an eliminate the "certificate error" situation. I am exploring the 'Redirect Mode' option.... which leads to several questions... - How does this function? - The Redirect Host - just a regular web server? Or some special configuration? - Anyo...

Resolved! Captive Portal Limit.

Does anyone know the limit of concurrent connections from Captive Portal? Is there a CLI or counter on the device for this?

Migrating SRX JunOS configs to Palo Alto

I know the migration tool does not support migrating SRX configs. Is there a tool out there that I could use to import a SRX config into a new Palo Alto 5060?Has anyone ever done it?If there isn't a tool, is there a way to import .csv files into Palo Alto? I'm on version 5.05.Any help would be greatly appreciated!Cheers!

GlobalProtect Client Rollback

Is there anyway to rollback the GlobalProtect client on an end-user's computer? I tried ReActivating an older client but, the client on my computer remained the newer one and did not rollback.

Discussions

Netflow stopped working

Resolved! How to do virtual routing for a third ISP (new MPLS)?