General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! URL/Application Blocking

Hi Guys,

Just wanna ask a few question. I was testing out the URL and Application Blocking. I was trying to block the facebook-chat, facebook-posting, etc.

to cut the story, I want to block the applications inside facebook but not the whole website. sa

...

HA email alert

hello guys,

does email configuration on pan allow you to receive email alert when primary or secondary pan ( in HA-mode ) when the primary firewall goes down? or when any of them stop responding ?

regards,

bp

Nike Plus

I have a Palo Alto 2050, software version 4.1.6

I have a user behind my Palo who can't log on to his Nike+ account. When he attempts to log on he gets redirected back to the sign on page continually. We've tested this outside the firewall and he has n

...

Decryption

Does the PAN still inspect secured traffic for all threats if it's not decrypting it?

Creating user activity report with all the username in AD

Hi All

I am trying to create a report that will display all my users in my active directory and their activities, the current user activity report only allow a single user. I have also try using the custom report creation but there is no tab for user

...

Authentication profile + Kerberos + group restrictions - should work?

Running 4.0.5 here.

I setup SSL VPN a while ago, and setup an authentication profile to pull from our Active Directory via Kerberos. I have an AD group and I only want the members of that group (or members of groups that are children of that master g

...

How to route internet traffic through a tunnel interface

What's the best way to route all internet traffic (except IPSec VPN tunnels) through a IPSec VPN tunnel interface?

We want to have a single point where all internet traffic passes through and uses the same policies for web and applications.

Resolved! Panos 4.1 and new pan agent

Hİ

i tried panos 4.1 and new agent(4.1-0-43) with active directory domain (but a way agent successfuly connect to active directory domain and showing active directory users)...i have trouble panos 4.1 when pa box try to connect pan agent i see below

...

Resolved! Round Robin NAT?

Hello,

I'm running PANOS 4.0.11 and I'd like to be able to set NAT to round robin between 2 servers in the DMZ. We would have a single public IP round robin NAT'd to two internal IPs. Is this possible on 4.0? How would I accomplish this?

Thanks,

Ian

syslog from PAM OS 3.1 to 4.1

Hi,

I migrated our PAN FW from 3.1 to 4.1 and there is some more fields on TRAFFIC and THREAT syslog format.

With 3.1, using syslog-ng, I got:

Sep 27 00:00:35 giacometti-2 00: 00:35,0003C100873,TRAFFIC,end, etc ...

Since by defualt in 4.1 there is more f

...

Resolved! Software Upgrade Question

When upgrading from PanOS 4.1.6 to 4.1.7, will the device fail over without issue as it installs the new software or will I have to schedule an outage? Thanks in advance.

-Matt

incomplete

Hello,

I need urgent help. I dont know why but from one moment during the day is one website unreachable from our internal network(only this website). There was no change in configuration PA500, no changes in web server configuration. From outside of

...

Resolved! Commit not showing who did it in system log

Dears,

I have a serious issue, yesterday the internet became down suddenly, when i check the firewall, i find out their is big changes happened on the firewall without us knowing, no one have change anything, when i went to the system log to see the

...

Resolved! IPSEC VPN implementations

Hi this is one the sample output that i captured when i established a VPN tunnel between 2 PA firewalls.

As far as my knowledge goes Ike SA's are bi directional and IPSEC SA's are uni directional correct me if i am wrong.

But here i see 2 SA's in Phase

...

Resolved! Re: Upgrade Process Using Panorama

Hi do we need to activate the devices first time from Panorama is that mandatory?

I already activated the devices and now when i try to add auth codes for rest of the devices its not happening and throwing error saying auth code already used.

Can some

...

Discussions