LDAP group based rules versus Policy based URL filters

I am coming from an M86 (8E6) R3000 and Surfcontrol install to the Palo Alto URL filtering.   I have multiple AD groups in my AD that are specific to URL filtering on the M86 R3000.

I am re-using those groups on the Palo Alto to recreate my functional

Outlook Anywhere

we recently moved to Palo Alto for our firwall needs. Is it possible to get Microsoft's Outlook Aynwhere to work with the Palo Alto firewall?

Thanks

Limited youtube access to a particular site.

Is it possible to block youtube totaly but allow youtube videos to be played from a particular site?

is it possible to export firewall rule only??

Hi all.

Is it possible to export security policy with CSV, PDF or txt format?? I can’t find any export menu only for firewall rule.

If it is possible, is it able to modify that exported firewall rule??

And then is it possible to import modified firewall

Lot of 'insufficient-data'

Hello,

We see a lot of 'insufficient-data' traffic on our firewall and we couldn't find any reason so far. Does anyone have a good idea on how we can troubleshoot the issue?

If we click on the insufficient-data bar we get redirected to the ACC but it d

CNSE Anyone?

Just wondering if anyone out there has done the CNSE and can offer any advice regarding recommended reading etc?

Thanks

DMZ Setup

I'm in a position where I need to move a device that is currently inside my network to a DMZ on my Palo 2050. Which puts me in a position where I need to create a DMZ on my Palo. Does PA have a good document for creating a DMZ? I haven't been able to

interface failover on PA500

Since link aggregation (LACP or etherchannel) is only supported on PA4000++ I want to build a simple interface-failover / interface-group setup (like any other enterprise firewall allows even on low-end devices).

group

To do this I would do the followi

ssl-vpn and IPsec tunnel Palo Alto with Check Point

Hello all,

I'm hoping that somebody may be able to answer a few questions I have about the configuration of Palo Alto firewalls please?

I want to set up two differents VPN, one ssl-vpn and one IPsec, i do this because i want to conect to my firewall fr

is it possible to add a CA in PA device?

Hello there.

I have a question related to CA for SSL client.

Customer has a certificate which issued by Trusted Root CA, but this trusted root CA is not contained in an ssl client's browser.

And then, the customer certificate was issued by this CA.

So,