Application Group for DC to DC communication

I have 2 domain controllers across 2 dmz's and i need them to talk. I have a list of ports I want to open but I want to keep it neat and create a application group. I dont see an easy way to search applications by ports.

Does anyone have a list of PA

Blocking via file extension (Text only)

Am I able to block via file extension, the text file extension ony, without any inspection and/or identification by the Palo Alto unit?

I want to block jar files but the PA keeps telling me they are zip files and then allows them. I would like to bloc

Many "not-resolved" category in URL Filtering log when using "URL Category" column in Security rules

Hi, all,

First, my customer doesn't buy "URL Filtering" license.

I use the "Custom URL Category" in the "URL Category" column at Security rules, as the attachement named "security-rules.png".

https://live.paloaltonetworks.com/servlet/JiveServlet/downloa

Polycom Real Presence issue

Hi (it's my day for asking questions, it seems).

We have a client who desires that we connect to a Polycom video conferencing system using some software called "PolyCom Real Presence".

The trouble is - it doesn't work, or works intermittently - sometim

PBR on 5.0 with redundant internet connections questions

Hello All,

New to Palo Alto.  I think PBR is working right.  But functionality is not what I wanted to happen.

I have Cisco DMVPN from all my remote sites to my corporate site.  This tunnel is created inside of the firewall.

my desired affect is to have

wildfire and security policy - problem

I have enabled wilfdire protection on polisy for NAT (also antyvirus/antyspyware/Volnerability).

From time totime I get email with information that someone from my network downloaded some files infected ie. by malware.

Until now I think that this file

Blocking a site hosted malware

A new "parked domain" company and come to surface, and they seem to own a LOT of domain names, none of which brightcloud has correctly classified as "parked domain".  The server in question is hosting a piece of malware called seedabutor.b.  Our AV i

test security-policy-match

Hi

Somebody help me write command test security-policy-match....... which WORKS and search that rule:

     VIP-TEST {

        from zone-v586;

        source any;

        source-region any;

        to zone-v8;

        destination 192.168.81.81;

        destin