URL Redirection, or forwarding

Hi,

We would like to redirect our internal request from www.google.com to www.google.com/ncr. Currently, all our Google search sites are redirected to Google Philippines, and besides our local staff, nobody speaks or reads Tagalog. How can we add a re

"show user ip-user-mapping" doesn't show users

hi,

I issue the command "show user ip-user-mapping" on PAN-OS 4.1.6. In the environment, there're 3 virtual systems.

I see in the traffic logs in Web UI, it can show user. but the cli doesn't.

PA2020 Web monitoring

Quick question that may have an even quicker answer. Is there any functionality to monitor users web browsing history through a Palo Alto 2020 box?

And if the answer is yes then is there any functionality to perform traffic shaping? And I don't just m

Global Protect impacting PGP Single Sign-on

Hello,

Just installed Global Protect 1.1.6 for first time and it seems to be interfering with our companies PGP Single Sign-on.

Initial authentication to the System PGP works fine.  Normally the system then takes you to your normal windows screen and

The publisher could not be verified

I noticed that when I download programs from the Internet with Decryption turned on, the downloaded file says "The publisher could not be verified", whereas if I grab the same file off a non-decrypted connection I do not get this same message.

How do

Blocking Application Filters

I've browsed through these forums regarding the best way to block applications.  I've saw the posts of folks blocking applications by app filter.

I have AD integrated AD groups.  These groups tie to individual Palo Alto security rules that allow any

fqdn - policies - wildcard

Hi,

i want to place a policy with fqdn entrys completed with wildcards.

e.g.

Our PCs have names like this:

LABPC01, LABPC02, LABPC03

Now i want to deny the internet traffic for every PC with the name LABPC*

But i also want to allow it to a special list of

Apple Laptop/Desktop Able to Bypass an Application Deny Policy

I have a policy setup to deny gmail and if a user has an Apple laptop or desktop they can get to gmail via https.  On a Windows laptop/desktop the deny policy prevents it, even when using Safari on Windows.  Anyone seen this and is there a way to pre

FTP Brute Force attack blocked only after 13 seconds

Hello,

Two months ago we correctly set up a rule to block Brute Force attacks on our FTP server in DMZ.

The related information can be found here: https://live.paloaltonetworks.com/message/16977#16977

We tested it manually by just entering wrong passwor