General Topics

Reverse direction in threat logs

When looking at the threat logs the vulnerability for spyware shows my servers as the attacker in the outbound direction. I have an inbound/outbound anti spyware policy and it caught jboss trying to access my network. Why does it show my servers as t

Multicast Packets forwarding

Hi Guys,

Looking for some help!

Quick simplifiy overview of the setup.

PA is the DHCP Server for two subnets:

Subnet A

10.101.0.0/16

Subnet B

10.102.0.0./16

All wireless clients are in subnet A  conencted via seperate enterprise Wireless LAn Controller and A

GlobalProtect - Windows agent not allowing internal access, but iPhone built-in does?

PAN version 5.0.4, GP client version 1.2.2. 

GlobalProtect is set up with a loopback address on both the portal and gateway, and they share a 3rd party cert.  I can access the portal, and download the client on a Windows machine.  I need to get this

Login failure notification

I am looking for a method to send a notification by email when authentication to the firewall management is attempted but fails.  It would be acceptable to get an email for successful authentications as well.  Overall I am looking for methods to help

Packet Capture (VLAN)

    How can i capture the packets for only one VLAN? I have a virtual Interface ethernet1/6.40 and if i use a filter for only the interface (ethernet1/6) the PA doesn't capture anything.

Data Filtering / URL Logs into Splunk

Hey Guys,

I have the Palo Alto App working for the Threat/Traffic Logs.

However, I would like to do the same for the Data Filtering / URL Logs.

Is this possible?

Let me know if it is and how to do it.

Thanks.

Brian

Youtube video seen as http-audio application

Greetings,

We have run into an issue in our deployment where SOME (really only a few) Youtube videos don't play, the user gets an error 'An error occurred, please try again later'.  In the traffic logs, I see traffic that is recognized as application

High Availability with Virtual Wires?

Hi,

I've been looking everywhere and I can only find information on virtual wires being used for path-monitoring in HA. What I'm looking for is if when in HA, do the virtual wires fail over? If they do fail over is there a best practices document det

HA path monitoring in virtual wire

I've seen a couple answers here about using Path Monitoring in Virtual Wire. They say that one must use an IP address within the Virtual Wire subnet as the source address. OK, I get that. What I don't get is how to configure such an address. I don't