SSL decryption, which version of SSL is used ?

All,

We have implemented SSL decryption for a customer. The certificate used on the PA is the same as on the server.

Our systems are scanned weekly by Qualys. One of the vulnerability is the following:

1/ SSL Server has SSLv2 Enabled Vulnerability

Soluti

目前我们暂时不支持OU做安全策略，那有没有办法将AD OU转成AD group呢？

在中国很多用户都是通过ou进行AD域结构管理，客户希望安全策略能够针对ou配置，palo alto有没有解决方案或第三方方法将ou转成group呢？现在很多项目因此功能没有突破受到影响。USE

policy-based ipsec vpn

i want to configure policy based IPSec vpn , in the administration guide i can see the steps for route-based IPsec VPN using tunnel interface , and directing the interesting traffic through the tunnel interface , nut i want to configure it without tu

Building a custom signature

Hi there,

I have some DVR CCTV cameras on some other sites that I need to be able to view within my network behind the PA box. At the moment I have been able to get them access by doing a security rule allowing access from certain users/IP's to the IP

Exporting Security Policies

One of our PCI Compliances is to have a record of the firewall rules, and review them once every six months. My Director likes to have them in a Excel Spreadsheet. Since the beginning, we have went from 79 policies to just about 200 policies, and cop

Dynamic block lists - possible xml config corruption

We recently upgraded to 5.0 and one of the first things I wanted to try out was the dynamic block lists.  I set up 4 block lists (dshield, zeus tracker, palevo tracker, spyeye tracker) and tested to make sure the URLs were accessible.  I rec'd the me

Hostname used for logon

I have a customer that is trying to use the hostname when browsing to the Palo to logon. They get to the logon page just fine, but after they enter their credentials and hit enter, the page goes to grey and just sits there. If the customer used the m

Management is still terrible

We've been using this platform for over a year now and the interface is not great to say the least. It takes no less than 30 minutes to make the most basic change. Is anyone else feeling the pain? Our SE is useless. Please create a Java client to rem