How to log traffic based on FQDN objects ?

Hello,

The traffic log feature is pretty usefull, however when using FQDN objects it becomes very tricky to identify traffic logs. Indeed, I use a lots of groups of FQDN objects, and even groups of groups of FQDN objects. And the traffic logs doesn't

C

Does anyone got working credit card regex, as the one listed above is not working plus anyone know how to restrict one credit card transaction over another.

Detecting a lot of spyware, 13190 (Smoke.Loader Command And Control Traffic)

I have a user that's triggering this alert frequently when doing normal Internet browsing.  Some detections are to bbc.com and other news outlet sites..  Nothing obvious comes up when analyzing the computer, so I was wondering if I could find out exa

SIP/RTP + NAT - One way audio

Hi all,

We are facing difficulties with a plain-in-to out and out-to-in NAT which is configured as described below:

- Private to public

- Public to private for ports 5060 an 9000-9049 UDP with the PBX address as destination.

For some reason SIP signalin

Can't Get AD groups to be used as user authentication

We are running 2 2050 firewalls running 4.16 software and 2 user agents running 4.1.0-43 code.   When i try to limit a policy by an AD user name it works fine.   However if I want to user a AD group name it wont hit the rule if i put in the user as a

Capture Gmail Username

Hi,

I am about to finish an evaluation with a customer.

He just shared with me a specfic requirement which would make him choose Palo Alto over competitors :

Gmail must be allowed, but it must be possible to capture the username used to login to gmail.

I

Monitoring throughput

Hi @all,

in the cli I have an option to monitor the throughput via "show system statistics". Is there a way to monitor the firewallthroughput from external devices via snmp?

Robert

how can i block site by category and user group

Hi there,

I have some questions regarding on how to block URL category and by user group.

the box is PA-2020 and when I block the social-networking with the source user is by group it wont work.

When i look on the CLI the user group is <XXXX>.org but on

GlobalProtect without license on 4.1.1

I have a problem with global protect without license i have configured it as in tech notes says, but when i commit i get the following message.

•Warning: No valid GlobalProtect portal license!(Module: useridd)

When i launch Global Protect Client it not