General Topics

wildfire and security policy - problem

I have enabled wilfdire protection on polisy for NAT (also antyvirus/antyspyware/Volnerability).

From time totime I get email with information that someone from my network downloaded some files infected ie. by malware.

Until now I think that this file

Blocking a site hosted malware

A new "parked domain" company and come to surface, and they seem to own a LOT of domain names, none of which brightcloud has correctly classified as "parked domain".  The server in question is hosting a piece of malware called seedabutor.b.  Our AV i

test security-policy-match

Hi

Somebody help me write command test security-policy-match....... which WORKS and search that rule:

     VIP-TEST {

        from zone-v586;

        source any;

        source-region any;

        to zone-v8;

        destination 192.168.81.81;

        destin

Has anyone taken a look at panug.com ?

I stumbled across a site that I think aims to be similar to https://www.cpug.org - sort of the community's independent forum where discussions about Palo Alto can take place. Kind of a neat idea, but I'm not sure how much community momentum it has.

Ch

Is the pintsized Java exploit that got Apple, Facebook, Twitter identified on the PAN FWs?

I'm wondering if the Java exploit that caused Apple, Facebook, Twitter, Zendesk, etc. to get hacked is something that is identified and blocked by up-to-date Palo Alto Firewalls.

Certificate for Secure Web GUI creation

Hello

Which attributes shall an external CA certificate have to be accepted as a Secure Web GUI Certificate?

I have imported one, but SSL Management doesn't work with it. These are its attributes:

   Version: 3 (0x2)
        Serial Number:
            15:

Best practice for OWA and OMA

Hi

I'm getting rid of our old ISA server which we used to expose OWA and OMA and want to use our PA-500 to allow domain users access to OWA and OMA (for their iPads etc).

I've noticed that the application 'Outlook-web' is used for OWA and its dependanc

Commit Error (sslvpn)

Hi,

I am recieving the following error when issuing a commit,

Management server failed to send phase 1 abort to client sslvpn

Management server failed to send phase 1 to client useridd

Commit failed

The only change in configuration is adding new local use

Inbound SSL Decryption and monitoring

Hello,

I'm trying to setup inbound SSL decryption. It is a pretty basic setup.  Two layer 3 interfaces on a PA-500.  One interface is in an 'Outside' zone, the other is in a 'DMZ' zone. In the DMZ zone is a web server with a signed SSL certificate.  T