Dears,I have PA-500 firewall. Now our VPN users getting random IP address. Can I assign static IP address to specific client?
Hi All,Does anyone know the licensing scheme of PAN? Any document for based license? What will happen if they don't renew any of the license? will the box still works with outdated signatures? Hope you could share any document about the licensing rules. thanks.Regards,eUGeNe
Anybody by chance have a signature for LifeSize? I added it to the applications list with just the ports used and generic categories but without a signature but it doesn't seem to be working. I thought before I dug into making my own signature I would find out if anybody has one already before I re-invent the wheel.Thanks!
Hello all,Last week I did the upgrade on my PA 2020 box from 4.18 to the latest 5.0.1 version. Today is the first day that most of the staff are back in and I have noticed that a lot of people are requesting websites to be unblocked. Having looked at the logs these URL's that are being blocked are showing as URL category not-resolved. This is ca...
I am on a PA2050 using 4.1.12 in Device/Setup/Wildfire I have Wildfire enabled. In Objects / Security Profiles / File Blocking I have rules that "ALERT" and "FORWARD" on certain file types.My rule base for USERS connecting to the INTERNET consists of rules that allow certain AD groups access to certain PROFILES. These profiles include data fi...
Hi all,I have a very common security rule permitting all traffic in for 80, 8080 and 443 ports, no matter the applicationThe attached URL security profile denies all url categories except for one (custom).Now I've noticed not to be able to get the expected block page each time a try to access a web site, specifically I can obtain the response pa...
Hello All,I am having issues with video conferencing when using our Polycom VSX7000 which was working fine previously with our Checkpoint Firewall. When we switch over to PA-2020. We start having issues.We are able to dial out to connect with remote VC unit but when the remote VC units tried to connect to us, the VSX7000 shows connected but ther...
Anyone have any good tricks to organizing an ever-growing list of security policies? We have quite a few especially with inspecting internal to internal traffic. The firewall uses a top down approach to inspection, so I wanted to see if there was a way to insert a break or notation marker to keep things a little more organized. Was going to j...
Hi,is it and when how is it possible to make a difference between a source which is using IE (company-standard) or firefox. I want to deny firefox-traffic.We use v5.0.3Cheers Klaus
Good Day Guys and GalsI need ideas on the following issue please! I have a block on all Social networking sites for the company. The Policy works great when the user tries to access http://plus.google.com, but when they use SSL (https://plus.google.com) the user gains full access to the site. Same goes for all other Social networking sites! How ...
I know that I can add a second IP to my outside interface by using a /32 instead of /24 like the first one has. My question comes in with routing. My default route shows a 0.0.0.0/0 going out ethernet1/1. Since this interface has 2 IPs what IP does it use for the routing? Will it use the one with a /24 or /32.
Hi -We are using User-ID Agents to create user-to-IP mappings and I've got group mapping configured on the firewall itself and I can browse through my ldap groups. However, when I go to Policies > Security Policy I am unable to select either individual users OR groups to assign the policy to... Nothing populates. Am I missing something some...
Looking through the white papers and documentation, I didn't really find much as to a recommendation on how to tackle the task of app-id configuration as a whole. Have any of you found any documentation that was helpful in this area? One approach I was considering was running a report to identify the most widely used applications within our orga...
Hello all,I use kerberos auth for Global Protect on PANOS-4.1.x.Remote users fail auth for GP connection that it appear 'invalid username'.So I want to collect PCAP on kerberos server and PA device.I know that PA use mgmt interface for communicated kerberos.I want to change interface from mgmt for collected PCAP.What does it change in 'service r...
Hello,We are using PA3020 in L3 A/P cluster mode. PanOS is release 5.0.2.We are using static routes to reach our different subnets.When trying to check a route destination to verify the path using the CLI, nothing is shown as there was no route for this particular destination :TSadmin@PA-3020_M(active)> show routing route destination 10.198....
PavelK
on:
Replacement of RMA
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 6 | |
| 4 | |
| 3 | |
| 3 | |
| 2 |
