General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

Resolved! GlobalProtect change password when expires

Does anyone know if there are any enhancements in version 5 where the GlobalProtect VPN client will prompt the user to change their password if it expires when using single sign-on with sources such as AD?

Resolved! blocking media streaming and chatting

Hello,

Today i blocked the media streaming but found media streaming is allowed from facebook website and also blocked the messengers but found messengers allowed except skype because we create a rule for skype.

How to block all media streaming and all

...

Resolved! can Iplanet Directory Server be integrated with Palo Alto?

Hi All,

I just want to verify if Iplanet diectory can be integrated with PA-unit. IDS is an oracle product. I haven't tried it yet. But as i check with user-id integration, it can support third party directory services.

Regards,

Eugene

Resolved! Creating a Cisco ASA - Palo Alto VPN tunnel for ALL traffic

I have a Cisco ASA at a remote site and PAN 3020 at my HQ site. The current site-to-site tunnel is working well and remote users can access resources in my network. Now comes the tricky part. In a perfect world, I could put another smaller PAN uni

...

Resolved! Panorama 5.0 with 4.1 devices

We are running Panorama 5.0, but still have some managed devices running 4.1. According to release notes, Panorama 5.0 should be backward compatible with 4.1 devices.

How does Panorama 5.0 treat 4.1 devices when it comes to template configuration? I k

...

One way traffic over IPSEC tunnel

Hi All,

Just having an issue with a newly created IPSEC tunnel on a new PA-500. I have tried 4 different devices at the remote end with the same results, so I'm really thinking my problem is due to mis-configuration at the PA-500 end.

The tunnel come

...

Dual ISP's - How to PA-500

Does anyone know of any good documentation that explains how to set up dual ISP's into my PA-500 device? I currently have a single T1 running into the PA-500, but am going to be adding a cable connection within the next couple weeks. I would like t

...

Modern Malware Review mitigation?

I thought the Modern Malware Review was great. Has anyone produced specific mitigation documentation addressing the many recommendations?

Resolved! Configuring GlobalProtect iOS App with XenMobile MDM

Does anyone have a write-up on how to configure the new GlobalProtect iOS App with Citrix's XenMobile MDM or any MDM?

Thanks,

Jeff

bandwidth use

I can see the live-time bandwidth by using the CLI:

Show system statistics session

But that only shows the real time download bandwidth – it doesn't show our upload bandwidth. Is there a command to use to see this traffic instead or combined with our d

...

Resolved! Brightcloud Url Filtering Cache

Hi,

Can we make Pan Cp and DP cache off to use URL filtering always dynamic.

I want from Pan that it always asks to brightcloud

How can I do this ?

How to apply Data Filtering effectively

It seems obvious to me that you can't simply apply the built in CC and SS filters in a Security Profile with an "any any". In my testing it really fouls up general web surfing.

Why is there no detailed documentation (at least any I can find in Knowled

...

Resolved! Websites with just text

I recently turned on URL Filtering and now some sites are coming up with just text.

CNN for example, has bullet points on the left next to titles that I can click on, the header is a small square with what looks like a jpeg avatar in the middle.

No gr

...

Resolved! VPN client-to-site

Hi!

I wonder if anyone managed to configure the IPsec VPN with AD authentication.

Note: No license Global protect.

At.,

How to force generating a daily pdf report?

Is it possible to force generating a daily pdf report? I am working on fine tuning reports to be send out on a daily bases, but I really don't want to wait 24 hours to wait for the result. Is there a way to force sending our the daily reports? There

...

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

How and Why to Accept a Solution to Your Post

Resolved! GlobalProtect change password when expires

Resolved! blocking media streaming and chatting

Resolved! can Iplanet Directory Server be integrated with Palo Alto?