General Topics

Resolved! Do I know when some vulnerability ID update??

HelloI know vulnerability 30844 signature when date update last.And I know it what version is last.I can find AV signature from threat vault page in support site.But I don't find to check it in CLI , GUI , Threat Vault etc.Thanks

Resolved! List of available protocol decoders?

Anyone know where I can find a list of available protocol decoders in the PA's? Is the "context" area of custom app/vuln sigs the only place where this is listed? If so, that's not a very easy place to extract the list from.

Resolved! o session

Hi,Have a installation with a PA-200 firewall.It's a standard vwire-setup with policyes from untrust to trust. It is places between the ISPs router and another firewall.The traffic is forwarding between the interfaces, but the PA-200 is counting 0 sessions.Log monitor e.g state null traffic. Have created a case at Palo Alto, but have no solutio...

What am I gonna do? (delete language.txt)

Hi,,,for the first time in long timeI write question,,since I use pan os 5.0I am used to use upload file to scp~!I always try to upload language custom file,,and so There are many dirty files in paloaltoI would like to delete language file to arrangesomebody help meCLI Command Please~~~ ^0^Thank you

Resolved! Does SSL decryption work on the Forward Proxy in tap mode?

Hello, This is Heejun from Uquest.I'm testing SSL decryption, and read some document saying that SSL decryption won't working with Forward Proxy in tap mode.But I heard that someone did this during previous POC. There's no way to check this right now.So I want to hear that whether this is possible or not.I've seen this contents in 'TechConnect -...

SSL Decryption Certifcate GPO Distribution

When exporting a certificate used for inbound ssl decryption which is to be deployed throughout a company through GPO to Internet Explorer, do you have to select Export Private Key or is it okay to just export the certificate?What is the difference between File Formats PEM and PKCS12?If a company created their own CA, does this also require the ...

Resolved! Wildcards in address objects

Instead of creating several address objects for the many MS update servers available, and then creating a group to plug into a security policy that allows my WSUS server to get updates, is there a way to use wildcards in the address objects? MS updates lists multiple locations available for updates: http://windowsupdate.microsoft.com http://*....

Dynamic DNS Support

Does anyone know if/when Palo Alto will integrate dynamic dns into its devices? This would be a tremendous help for devices that are using DHCP from service providers.

Resolved! Email scheduler and Report names

Does anyone know if you can change the email scheduler to allow a report recurrence to run monthly? The options in 5.0.1 allow daily but there is no option for monthly? Also why is the reporting name restricted to 31 characters? When creating a large number of reports it is very limiting to only be able to use 31 characters as it doesn't allo...

Problem with Knowledgepoint and Internet Explorer 10

Just discovered that knowledgepoint (Jive engine) do not support ie10.I have also discovered that the reason is in Jive and is currently patched (The issue was that IE10 is being recognized as IE1, which does not pass the browser check)My walkaround is : I hit F12 and select Browser Mode:IE8 then I can work around it. (for some reason IE9 did no...

Resolved! VM100 and Custom Reports.

The VM100 on 5.0.2 seems to have an issue running custom reports. It crashes when I run them. I know I can just run them from the firewalls but is this something anyone is experiencing.

Resolved! GlobalProtect Pre-logon - unique machine certificate?

Could not find a straight answer in documentation or in other threads - using GlobalProtect Pre-logon, does the machine certificate has to be unique for every machine (different CN) or can we use one, generic certificate and deploy it on every machine in the company?Many thanks for the answer!

Resolved! GlobalProtect APP for Android Devices

I can't find it. Can somebody direct me if there is one out there?

How do I identify iOS company assets in HIP Profiles?

Hi,We are currently testing GlobalProtect as an SSL VPN replacement. In our current Juniper environment, we use a user cert (pushed to all company iOS assets via MDM) to verify an iOS device is a company asset. Is there any similar methodology we can use with the Global Protect environment as a HIP Profile that we can use to build policy against...

Will the iOS GlobalProtect VPN client be effected by the Apple/VirnetX lawsuit?

As a result of this lawsuit, will the iOS GlobalProtect VPN client lose its On-Demand function of "Always" just like the native iOS client will?KB Article about the upcoming Apple changesiOS 6.1: VPN On Demand does not always initiate a VPN connection

Discussions

Resolved! Do I know when some vulnerability ID update??