Resolved! differentiate between IE and FF

Hi,

is it and when how is it possible to make a difference between a source which is using IE (company-standard) or firefox. I want to deny firefox-traffic.

We use v5.0.3

Cheers Klaus

Resolved! Multiple IP addresses on an interface

I know that I can add a second IP to my outside interface by using a /32 instead of /24 like the first one has.  My question comes in with routing.  My default route shows a 0.0.0.0/0 going out ethernet1/1.  Since this interface has 2 IPs what IP doe

Resolved! What does it change in 'service route configuration' that Use kerberos for Global Protect??

Hello all,

I use kerberos auth for Global Protect on PANOS-4.1.x.

Remote users fail auth for GP connection that it appear 'invalid username'.

So I want to collect PCAP on kerberos server and PA device.

I know that PA use mgmt interface for communicated k

Resolved! Packet Capture stopped working

Hi,

the last days I did some captures on a PA-2020. At Yesterday I tried again but it doesn't work anymore. Tried via WebGUI and CLI.
If I start the capture it is shown running but no files are created. PAN-OS is 4.1.12.

Does anybody know this issue? C

Resolved! RADIUS and CISCO ACS v5.1

Hello!

Is it possible to configure the PA to read the RADIUS logs in Cisco ACS v5.1? Can the PA map users which have authenticated to a RADIUS server, the external DB being AD?

Resolved! Does the PAN User-ID Agent 3.1.X work with window 2008 server DC?

Hello, Guys.

Thanks always.. I just want to know whether the PAN User-ID Agent 3.1.X can read the security log of the Window 2008 server DC.

I tired to find the document, but It's the grand- father version.. So It's hard to get an information.

Regards,

Resolved! Palo Alto drops current local login when using RDP

Hi!

We are currently using a PA500 appliance using User ID Agent on Windows Server 2008 R2.

My profile account (ex. super_user) is exempted to all which means I have no restrictions in accessing any websites.

Apparently, when I RDP our servers I have to

Resolved! When doing inbound SSL decrypt via a Palo Alto firewall, how are the private keys that you load into the FW protected?

I had this question come up from a security minded colleague at work, and it was a good question that I didn't know the answer to.

In order to do SSL decryption for inbound SSL connections to servers that sit "behind" the Palo Alto, the procedure invo