General Topics

group mapping

When we add a group from Active directory gorup list from Group mapping on Panos to right side of that window; it should come to the policy users tab.But sometimes it does not come for a time.Is there a way to refresh that or what is refresh time for that, can we change it ?

Resolved! Not able to upload URL database manually to the PaloAlto.

Hi All,I had downloaded the URL database from the support portal and tried to upload the same to PaloAlto but it is not allowing ( OK option is not getting highlighted). I did the fallowing: Upload -> URL package -> Browse and selected the downloaded file but it is not allowing to save that...

Resolved! Incorrect Username when using Captive Portal # set session processing-cpu dp0???

Greetings,For a quick background; using PA-500 running version 5.0.1 with the User-ID agent installed for domain users as a stand alone agent on the Domain Controller and captive portal setup for AD users using wireless devices.I have Captive Portal configured with NTLM redirect setup. It was all working good with users authenticating and users...

Resolved! If Vwire is transparent, then why do you have to specify which VLANs are allowed through?

I usually just open up the range of vlans from 1-4094...but why do this is it's meant to be transparent?

Resolved! Captive Portal and User Limit

Hi All; We have seen a limit to the user to IP mapping on a 5000 series for captive portal at 2500 concurrent users, is there a definite maximum? Does the system roll over the last user in when this occurs or is there an error on the 64001st user.

Resolved! Tunnels killing the management plane

Hey All; I was wondering if there was a way to optimize the use of the Management plane to use VPN tunnels more efficiently, when you have more than 150 tunnels the IPSec negotiations take a lot of CPU.

Resolved! Risk Score in ACC

As I drill down through the ACC the risk score tends to stay the same, on the dashboard does the risk change for the time period or pivot when you drill down?

MAP Widget Multiple Firewalls Panorama

Has anyone found a way to overlay or explain the overlay from Panorama when multiple firewalls are logging and we display the MAP widget

Resolved! Cisco IP Any Migration

Hi All; Just double checking if the service set to TCP and UDP would cover the Cisco "IP" on rule conversions.

Resolved! Feature Requests

How do we lookup the current list of desired features? And or add to it.

Resolved! Change Monitor Data

Any way we can get the change monitor apps beyond the monitor tab?

Resolved! Syslog Suppression

Do you know if there is a way to throttle the syslog from the device. Most are licensed on an EPS scale which means throttling could help keep the volume down.

Resolved! MAP Widget bubbles

Can someone explain what the "Top 100" are with the map widget in the Monitor tab. Is it the most recent? Severe? Does it count multiple threats as the same from the same region?

Resolved! For Syslog

Is there a way to send the same syslog messages to two syslog servers at the same time ?

Re-evaluating current structure

I am currently managing users via AD groups but need a more granular approach. I recently added a BYOD device manager to my network. It divides my 2 main groups using a specific IP range. If I use this method to manage users I will probably have to reset all my policies. My question is should I start by blocking all processes then open just ...

Discussions

group mapping

Resolved! Not able to upload URL database manually to the PaloAlto.

Resolved! Incorrect Username when using Captive Portal # set session processing-cpu dp0???