Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
In todays content update one can read:
"
Modified Decoders (6)
Name
gtalk-p2p
ipsec-esp-udp
jabber
ssl
google-talk
oracle
"
How come gtalk-p2p isnt named google-talk-p2p or is gtalk something else?
Yeah I know thi
...
I need to create rules for a PCI firewall for a WSUS server. Microsoft does not publish IP's for their update points so this is problematic on a PCI firewall (or it seems to me). I can either:
1) create a rule which allows the server out to "any" usin
...
I have a unique situation. Currently, I have a 10,000 + user based network and implemented Captive Portal Policy. We have certain AD accounts that auto login with certain machines. We want to always captive portal those certain logins. So I am want
...
hi,
i need a little help to configure a DMZ. here is our situation:
interfaces
ethernet1/1 - 1.1.1.1 (public - NAT clients)
ethernet1/1.1 - 1.1.1.2 (public - NAT DMZ)
ethernet1/1.2 - 1.1.1.3 (public)
.
.
ethernet1/6 - 10.10.30.1 (DMZ)
.
ethernet1/8 - 10.10.20.
...
Hello, Everybody,
we would like to aggregate ethernet interfaces of our PA-5050 (4.1.7 PANOS) in order to have a redundant physical connection towards our Cisco Catalyst switches.
Sound like LACP is not working with PAN and we had to set PaGP, which, o
...
Hello,
Cause untagged sub-interface does not support in OSPF routing from v4.1.5. If I have that configuration usage in firmware before v4.1.5 (v4.1.1). What is the right way to configure OSPF area interface, if I want to keep IP address(subnet) of th
...
Hi all,
We found this threat"BOT: TDSS.C Trojan Traffic Detected" on 3rd party's IPS(McAfee) deivce,but i can't find this event on Paloalto Threat DB.
Have anyone ever face same problem? Or have other solution can protect this attack ?
Regards,
Jim
Hello,
is it possible to show a list of automatically blocked IP addresses (example: Threat prevention for Brute-Force Attacks).
And is it possible to remove an IP from that list?
Thanks
Jörg
Hi Guys,
Just wanna ask a few question. I was testing out the URL and Application Blocking. I was trying to block the facebook-chat, facebook-posting, etc.
to cut the story, I want to block the applications inside facebook but not the whole website. sa
...
hello guys,
does email configuration on pan allow you to receive email alert when primary or secondary pan ( in HA-mode ) when the primary firewall goes down? or when any of them stop responding ?
regards,
bp
I have a Palo Alto 2050, software version 4.1.6
I have a user behind my Palo who can't log on to his Nike+ account. When he attempts to log on he gets redirected back to the sign on page continually. We've tested this outside the firewall and he has n
...
Hi All
I am trying to create a report that will display all my users in my active directory and their activities, the current user activity report only allow a single user. I have also try using the custom report creation but there is no tab for user
...
Running 4.0.5 here.
I setup SSL VPN a while ago, and setup an authentication profile to pull from our Active Directory via Kerberos. I have an AD group and I only want the members of that group (or members of groups that are children of that master g
...
What's the best way to route all internet traffic (except IPSec VPN tunnels) through a IPSec VPN tunnel interface?
We want to have a single point where all internet traffic passes through and uses the same policies for web and applications.
OtakarKlier
on:
RFC1006 protocol over TCP
OtakarKlier
on:
Windows update URLs with IP addresses show up as unknown
OtakarKlier
on:
Panorama Upgrade
OtakarKlier
on:
Layer 3 between 2 buildings
OtakarKlier
on:
URL Category rule works on some firewalls but not others
OtakarKlier
on:
CPE for the Conferences or Summits
