在中国很多用户都是通过ou进行AD域结构管理，客户希望安全策略能够针对ou配置，palo alto有没有解决方案或第三方方法将ou转成group呢？现在很多项目因此功能没有突破受到影响。USE
Hi, I know that security rule can set with user and group but some customer need the OU.the PAN support this ?
i want to configure policy based IPSec vpn , in the administration guide i can see the steps for route-based IPsec VPN using tunnel interface , and directing the interesting traffic through the tunnel interface , nut i want to configure it without tunnel interface
Hi there,I have some DVR CCTV cameras on some other sites that I need to be able to view within my network behind the PA box. At the moment I have been able to get them access by doing a security rule allowing access from certain users/IP's to the IP addresses of said DVR's onsite. However, I have not been able to lock these down very much. At t...
A client want to download a exe file from a bank website to log into its online banking system, however she got the following message after she clicked download link "http://www.cmbc.com.cn/download/民生个人网银安全控件.exe".Is there anyway to unblock the specific exe file in PAN?The software version is 4.1.7.Virus Download BlockedDownload of the virus ha...
Hi I'm trying to configure group mapping settings of user identification. I'm confused that what is the default value of update interval on group mapping? Or should I let it blank? I can not find any information in Administrator Guide. Does anyone kindly tell me?Thanks,Scottie
On a PAN with no BrightCloud license, you can still use the URL filtering "Block" and "Allow" lists. Right now I use that feature to have a "log-all" URL filtering policy where I have "*" in the block list and an action of "alert." But now I have one (or it could be a short list) of URLs that I want to really block, i.e. an action of "block." Ho...
One of our PCI Compliances is to have a record of the firewall rules, and review them once every six months. My Director likes to have them in a Excel Spreadsheet. Since the beginning, we have went from 79 policies to just about 200 policies, and copy and pasting them into Excel is beginning to become cumbersome. Is there there something I am mi...
I am trying to understand the sample OSPF Active/Passive HA configuration outlined in Tech Note: How to Configure OSPF https://live.paloaltonetworks.com/docs/DOC-1939 . The problem I have is with the floating static routes defined on upstream and downstream routers intended to reduce failover times. Floating static routes are described in s...
Hi All,We run PanOS 4.0.9 on PA-2050 previous, and traffic log filters results are normally. however after we upgrade PanOS to 4.1.7-h2, the traffic log filter results with non admin account are abnormally, but when we change back to admin account and do the same, it works normally.The non admin account was created by admin, and authenticated wi...
We recently upgraded to 5.0 and one of the first things I wanted to try out was the dynamic block lists. I set up 4 block lists (dshield, zeus tracker, palevo tracker, spyeye tracker) and tested to make sure the URLs were accessible. I rec'd the message that they were accessible/readable, so I set them to pull data daily at 7:00am, 7:01am, 7:0...
I have a customer that is trying to use the hostname when browsing to the Palo to logon. They get to the logon page just fine, but after they enter their credentials and hit enter, the page goes to grey and just sits there. If the customer used the management IP address to logon, everything works just fine.Any suggestions as to what is causing t...
We've been using this platform for over a year now and the interface is not great to say the least. It takes no less than 30 minutes to make the most basic change. Is anyone else feeling the pain? Our SE is useless. Please create a Java client to remove the burden from the appliance.
I have read over the document on how to configure the captive portal. Maybe I am missing it, or having a senior moment, but I am little puzzled.What I want to do is make sure when we have guests, vendors, salespeople etc, connect their device to our network that they have to authenticate before they can use the Internet. Where I am puzzled in th...
Hello guys,I want to install a PBF rule with custom application. Is it possible to configure on PAN?Thanks.Regards,Roh
OtakarKlier
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
OtakarKlier
on:
Network wifi Management
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 7 | |
| 6 | |
| 6 | |
| 4 | |
| 3 |
