General Topics

Resolved! Empty WildFire log after upgrade

HiFew days ago I upgradded my devices from 4.1.10 to 5.0.3I found new log caled WildFire, but it's empty.Yestarday I got email from WildFire with report that someone from my network downloaded malware. So Im sure that this incident should be in log - but it isn't - why?Do I need to configure something?RegardsSlawek

Vulnerability Protection CVE-2013-0431

I've spend some time on testing vulnerability protection on the PA firewall. The protection engine did a good job, but there is no protection against CVE-2013-0431: Java Applet JMX Remote Code ExecutionI'm running PANOS 5.0.1 and Version Application and Threat ID: 364-1728.You can find the results on my web site (www.accessdenied.be) in the docu...

Resolved! HA setup doc

I am looking for the setup documentation to setup HA when the devices aren't directly connected . We have a requirement to setup fail-over to recovery site reachable via IP . I have seen the doc to setup HA with the devices next to each other .Thanks

Reporting Question

Hi Folks,We are about to go through an internal audit and it has been requested that I produce a report about the threats that have attempted to come through out PA-5020, how many were blocked and confirmation that it was indeed blocked.is there a report that does that already or will it need to be custom?thanks!!

Resolved! I want device does not send Email if has special character. How way is it?

Hello everyone.I use that device send Email if system log servirity pass over medium class.I often receive unimportant Email such as ip-already-in-use.Does not device send Email if has special character on system log ????

Resolved! Minimum GlobalProtect version for Win8

?

Pcanywhere view only remote control session

As above.This is so that the remote user could only view but have no control over the local mouse and keyboard.

Panagent.msi

I may have one stupid question.I recently started to gain knowledge about PanOS system, and stil cannot find panagent.msi file on this web site.I would appreciate any help.

Resolved! LDAP Authentication

Hello all,I'm running on a PA5050 and I'm wondering how I specify what groups I want to have specific access to the WebUI using LDAP authentication. Also, is there a way to setup automatic account creation for new accounts that login using LDAP or do I still need to manually add everyone?Thanks in advance.

Resolved! How do VPN connections get monitored outside of logs?

Am I missing some way of monitoring VPN connections outside of watching the logs? How about a widget or something?

5.0.3 - ready for production?

HiI have PA200 with 4.1.10, and I'd like to use few new features from 5.0.x series, and I hope that my problems with QoS will goneIs it in your opinion (taken from real life) 5.0.3 ready for production environment?Last time (user id issue) testing team didnt work well in PA, did you discovered or heard about any new issues in 5.0.3?what I pay a...

Global Protect Gateway Config Issue PAN-OS 5

I'm setting up Global Protect on a PA-200, PAN_OS 5.There appears to be a bug when setting up the Global Protect Gateway.Following the instructions in the Admin Guide for 5.0, it states to choose the interface and the IP on the General tab. Then on the Client tab choose Tunnel and then you can setup all that fun stuff.The issue was that everyth...

cutom report: session/IP

HiRecently I discoverred that on my device amount of session rised from ~500 to ~1000, Id like to know which IPs are generating most of this sessions.I try to make custom report but there I cant find "sessions" counter, only "session ID"Is it possible to make such report or check it from the CLI?RegardsSLawek

Why do we have to separate Session Owner and Session Setup Device in an A/A-Cluster

Hello,in the documentation it is said: "The separation of session owner and session setup devices is necessary to avoid race conditions that can occur in asymmetrically routed environments.”But nothing more in detail.I absolutely understand, what the session owner and what the session setup device is doing and I understand the configuration. But...

Resolved! Service route issue

Hi all,Has someone see that when management interface cannot access internet for any service at all; After you visit ACC and troubleshoot an application detail, your ssh and webgui becomes inaccessible.Panos 5.0.3Thanks.

Discussions

Resolved! Empty WildFire log after upgrade