Using RADIUS for admin access without local accounts

Hey All,

This might be documented or already discussed but I can't seem to find anything on it. Question is.....Is it possible to use RADIUS for admin access to a PAN box without the need for local accounts ?

Many Thanks

Jon.

Site is not loading

Dear All,

I failed load below site eventhough the url filtering is off. Any idea? This site is working well in dsl connection.

http://www.soti.net/

Thanks

Asanka

on Palo Alto Certificate create

L2 with Aggregate

Hi

  We would like to configure L2 with Aggregate between PANOS (4.1 - PA5050) with cisco switch

     -  After we do L2 Aggregate  , and assign IP Address on VLAN , we find that when we ping to this IP Address , there are many request-timeout.

     - If

Filter activesync

Hello,

I wonder if the following is possible. (Question from a potential customer).

They want to filter/DENY MAIL from the activesync traffic to mobile devices (users in the organzation using phones that are not approved because of security).

But they w

Unable to Run User Activity Report After PAN OS Upgrade

We recently upgraded our appliance to 4.1.3, and now cannot retrieve any data prior to the OS upgrade when running User Activity Reports.  My logdb shows that we are near full capacity (but haven't reached the 80% threshold as of yet); however can on

HA questions

Hello,

I'm having trouble understanding how Active/Passive HA works in Palo Alto. In other solutions the active device has a virtual address on top of its physical interface address, and when the active device goes down the passive device 'takes over'

Change an address to a "shared address"

Is there an easy way to change an address to a shared address for virtuals domains.

The only way we found is to clone the address and change every policies where the address is used which is very long !

Block access to sites with invalid SSL cert

Hi,

I could not find a way to block access to sites with invalid (self signed, expired) ssl certifcates. Any Ideas ?

PAN OS 4.1.3.

rgds Roland

Slow commit

Hi,

I'm running the latest firmware from PAN on a PA-500.  Not long ago the commit was pretty fast, like 1 minute or so.

I haven't done any major changes, but i've noticed the commit has become gradually slower as time passes.  Now its really slow!

Can

Report for Candidate Confiuration

show config candidate can show candidate file, is it possible to create a report for candidate configure output?

Thanks

Simey