Blocking traffic from another country

Hello,

We have an Extranet server which sits on our DMZ... http and https are allowed through the firewall so that outside users can access the web app on that server.  My server admin asked me if I can block all inbound traffic from China and Taiwan

Interesting RSS feeds or blogs?

I am curious as to what blogs, RSS feeeds and/or forums others follow regarding security/corporate level firewalls/etc.

Side note:  Unless I am missing something, the RSS feeds in PA support don't work.

Thanks,

Bob

Exchange Load Balancing

Hello,

Basically the scenario is that we have one exchange server behind the firewall, external users are accessing this server usning a host name mapped by a service provider to two different Public IP's using DNS round robin,

Is it possible to config

Very strange problem with connection

Very strange problem
Hi,
have paloalto PA-500.
I have three internet providers.
I have many branch offices (40).

my case

4.1.0 software
from all branch office we ping WAN1, WAN2, WAN3 is OK

the weekend I did upgrade the software to version 4.1.3
from all bran

PAN and NetMotion

We run our NetMotion connections through the PAN for our mobile clients.  The troubled moblle application receives dispatch information from our CAD application and since switching to the PAN from our previous firewall the delivery of this informatio

Multiple Public IP's on External Interface

All,

I apologize if this has been asked before but I couldn't find anything related to my specific question.  I am a newbie when it comes to firewalls in general.  We are going to be migrating from ISA to the PA firewall shortly and I have a question

SNMP TRAP Recommend

Hi All

I want to set snmp traps to my snmp-server , are there any recommend about that ?

I have got the snmp mip from paloalto support site, but there are too many descrpitions about trap, so maybe someone can give me some recommends about system healt

Incoming Traffic failed in Active Active HA

Hi,

I setup active/active configuration and everything seems to be working. We test HA by powering off the other peer and vice versa. All outgoing traffic are working as expected. But, we notice that we're not receiving incoming traffic if one of the

USER - ID FOR EXCHANGE SERVER

Hi Guys ,

I see on PAN OS 4.1 releases , We can discover user from Exchange Server.

So where we have a document to understand more better how it works ?

Where can i do download for this agent ?

I need to install something on my exchange server ?

Best Rega

Brute Force Signatures

hi : In regard to Brute Force Vulnerability Signatures 40015 (ssh) and 40021 (rdp) :

Why is there not a way to permanently block an IP number that exceeds the configured  Number of Hits per time period? Is this possibly in the works fro a future relea

TCP sequence number inference attack

Is the Palo Alto Firewall also affected by this vulnerability?

http://tinyurl.com/bpf9odl

Kind regards

Marc