General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! Captive Portal & Active Directory Password Change

Hello, we are currenlty using captive portal for pupil laptops and mobile devices that are not joined to the domain to authenticate for internet access.Does anyone know if you can use or setup captive portal that is a users active driectoy account and been set to change that this can be done via captive portal with out them having to go to a sch...

Resolved! Deliver App-ID updates from Panorama to firewall devices automatically

In Panorama and the firewall device itself you can schedule download of App-ID updates from Internet (updates.paloaltonetworks.com).In Panorama - Device Deployment - you can download App-ID updates manually and install them manually to selected devices. Found nothing there to schedule this.Is it possible to configure that the firewall devices au...

User-ID 4.1.4-3 service is not restarting after Windows Server 2008 R2

Service Name: User-ID Agent is not "Automatically" restarting when Windows Server 2008 R2 is reboot/restart for maintenance. Is this issue experienced in other companies? Did I miss a configuration step ? bkenyon@ces-group.com

Resolved! Global Protect client working simultaneously on Mac OSX & Windows OS under Parallels

Has anyone tested the Global Protect client on a Mac running WIndows OS under Parallels or VMware Fusion? Will the client connect to the GP Gateway under both OSs simultaneously?

control SSL ciphers

Hello all,Is it possible to deny/block inbound SSL flows - based on the SSL cipher parameter ? For example, deny SSL if the cipher is 128 bits ?Maybe with a custom signature ?Does anyone have an idea ?Thanks you for your help,Regards,

PanOS 5 application dependancy

Hi,I have a question about the new PanOS 5 feature that's supposed to handle application dependancies automatically (or better). Do I need to enable this somewhere or configure it? I am running 5.0 and when commiting, it still reminds me about application dependancies and that I need to add more apps to make certain rules work.ThanksSascha

Resolved! URL Filtering by group if user lives in multiple groups

Does anyone know of an elegant way to handle the following:We'd like to use Active Directory groups to be able to allow some users access to certain URL categories that we block for most users. We have a default URL filtering profile that is the most restrictive and then we want to have AD groups that we can use to open some categories to certai...

Resolved! URL filtering in PAN-OS5

Is there any information on this anywhere (ie the new PAN database, not Brightcloud)Is there a list of categories, and how do they map onto the Brightcloud categories?How can I lookup what category a URL is in, and request a change if required?

debug dataplane packet-diag causes PA5050 to stop working? PAN-OS 4.1.7

Hi,today i tried to debug a packet flow via the "debug dataplane packet-diag" command.I did that by using this guide.Unfortunately this causes our PA5050 Active/Passive Cluster to complete stop working for a few minutes. :smileyangry:Is this a known bug in PAN-OS 4.1.7?I used a packet filter so cpu can't/should not be an issue.Here my debug sett...

Issues again with Brightcloud Services

On the 12th of November 2012, I am having issues again with Brightcloud not resolving websites from the cloud dB. This has happened in the month of October 2012 as well. The Brightcloud services cannot receive data as well. All connections look absoutely fine and this just started happening out of the blue.This is also happening across all my...

Multiple Captive Portal Settings

I know on top of my head that multiple captive portal profiles are not possible. But was just wondering if there is or I might have missed something on how we can acheive this.I want to set a captive portal for Group A to have 60mins of session and Group B to have 30mins of uniterrupted browsing session. Once members of Group B have reached 30...

Resolved! Filtering on "decrypted"

Is it possible to set a filter in traffic log (or others) to only show SSL decrypted traffic ?

SSL VPN WITH CITRIX XENAPP

Hi GuysDoes anyone try to integrate citrix xenapp with ssl vpn ?It`s possible ?Best RegardsThiago Lima!

Resolved! Policy migration question...

I am migrating from a port-based firewall to the PA and I want to put the application for all policies that cover inbound services instead of the ports. I plan on temporarily doing a V-wire on the internet connection before the cutover to gather the app-ids needed for each policy so here is my question: Is there a report which will tell me the...

Resolved! Cisco Telepresence test failing due to SDP being rewritten

We ran http://test.callway.com on our network to test Cisco WebEx Telepresence and it fails due to the following:IssueYour firewall is altering SIP messages and interfering with the proper operation of WebEx Telepresence.What does this mean?Your calls may drop or not complete successfully, and you may not be able to use extended features.What ca...