Hi,I have a requirement to generate alert if a website is accessed frequently in short time. For e.g. www.google.com is accessed every 5 mins etc. Is there any way to generate a signature based on URL and hits?
We have an active Brightcloud URL filtering license. We would like to start using PAN-DB. Our sales tells me this is only possible at time of license renewal (that would be another 9 months for us).I find this hard to believe. Is there no way the Brightcloud URL filtering license can be converted into a PAN-DB license ?
Ok group I have a nice and simple question about trying to get GP up and running. Everything (I think) looks right, and configured, but I am not able to quite get my client connected to the Gateway(T10944) 03/12/13 11:56:27:075 Debug( 742): File C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer exists. File is tca.cer (T10944) 03/12/13 1...
Hello,So have any of you found any cool uses of the USB port on the PA-200?I myself have connected my Raspberry Pi to it. The PA-200 gives more than enough power and I have also connected a wireless usb adapter to the raspberry.The raspberry serves as my internal dns and dhcp server at home. I could also use the wireless usb adapter for setting ...
Scenario:I want to authenticate unknown users from my network to the internet.I´m able to authenticate users in my ldap server using the web form, from my captive-portal in my pa-500.But my issue is this:Before the users receiving the portal page they receive the error in the browser saying, that is an invalid certificate. I understand this, bec...
Hi,Where do antivirus profile alerts log to?Also, if I set the action to "block" for a decoder in the antivirus profile, does it still log the event?Any help is greatly appreciated.M
Working on setting up a 5050 with user-id mapping against 2 domain controllers. the agent-less, WMI based setup is working fine thus far, except I cant figure out how to exclude certain IP ranges.For instance. We have a VPN appliance that does Kerberos authentication to the AD Domain. Everytime a user logs in, it associates the IP of the devi...
Every year our network is brought to a crawl by users watching March Madness. I am wondering what I can do to minimize the impact on our network this year?We currently have QoS setup up limiting traffic for certain apps. I am wondering what apps others have applied to QoS and perhaps other methods to limit the amount of bandwidth going to those ...
Dear all,How would it be possible to validate the security policy rules to have all a content inspection profile enabled?Because the "option" field does not allow to be selected as filter in the editor tab. (as this is the case for e.g. addresses or zones)Custom reports do also not include the ability to select content profile as an attribute.Th...
Riddle me this…We have issues with malicious traffic coming from Open Proxies, Known Bad Hosts, etc. Is there such thing as an all IP, Realtime Blacklist for firewalls. There are certain external servers I dont want to be accessible by known bad networks. I’d love to write a rule like this:Source = RBL-or-Block-of-BAD-IPs-maintained-by-someone-e...
We are running 5520's A/A. Today we experienced an issue with one of the boxes managment interface shutting down. We had to power cycle the box to get the mangement interface back up.Is this a known issue?We are running 5.0.2Thanks
Hi AllI am using PA 5050 with PAN OS 5.0. PA is automatically refreshing FQDN evrery 30 min. I want to refresh the FQDN manually or reduce the refresh time less than 30 min. How can I do this . Please can anyone suggest me how to do it .Thanks
Hello, I was wondering if anyone knew exactly how the "forward" action for Wildfire worked. Does it forward the file to Wildfire and then disallow the user to access that file, or does it forward it and allow it to pass through for the user to access the file?Thanks!Jared
Does anyone else feel that the application dependencies for MSRPC are incorrect?PA currently lists MSRPC as dependent on MS-DS-SMB and NETBIOS-SS. However, those protocols are not actually necessary for MSRPC to work. They are distinct protocols with different purposes. To my mind, including those dependencies encourages administrators to includ...
Hello,I am setting up Palo Alto Firewall and want to export logs in CSV format to a UNIX filer daily at a specified time of the day. I have these questions:How do I schedule log export job so that it exports logs of only that particular day (and not all log history)?What is the default size of the log buffer? If log buffer gets full before the s...
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
TomYoung
on:
FWs no longer forwarding logs to Panorama
| User | Likes Count |
|---|---|
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
