This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

stunnel download triggering Virus/Win32.WGeneric.bpzq alert

Has anyone using a Palo had need to download stunnel and, if so, did it trigger a Virus alert for Virus/Win32.WGeneric.bpzq?Would like to confirm that the download has not been compromised before I bypass this alert - and I'm assuming it's not just been marked as 'grey-ware' as I would have expected a more definitive alert based on the applicati...

apackard by • L4 Transporter
  • 2149 Views
  • 1 replies
  • 0 Likes

blocking traffic with User-Agent header, ie Mobile

We have a need to block mobile devices from getting to a particular host with active-sync, imap or pop3. From what I have read looking for and blocking traffic based on User-Agent is possible. Anyone ever do this with the PA ?Thanks,Justin

jhickey by • L3 Networker
  • 2839 Views
  • 1 replies
  • 0 Likes

Resolved! UIA 4.1 - Monitor multiple domains

Hi,Simple question, resulting from mixed messages I've received:When using UIA 4.1 is it or is it not possible to monitor user/ip mappings for multiple domains (with trust between them) using a single User-ID agent?Thanks.

sdw by • L1 Bithead
  • 2624 Views
  • 1 replies
  • 0 Likes

Firemon

Hi all, I have just installed a firemon appliance and have added the palo alto firewalls.they all seem to be pulling the configs but I see no change in the Audit log.Also the Log Status is red on all of them (In Firemon)Has anyone got this working?I know they are an official PAN partner but I dont see any feature lists anywhere.....Thanks in adv...

Resolved! User Agent

Installed the user agent on a windows 2003 server. every time you try to start the service you get the windows box stating the service was started, but then stopped.

snormoyle by • Not applicable
  • 3850 Views
  • 4 replies
  • 0 Likes

Resolved! Questions on Palo Alto safe practices

Hi i have a few outstanding questions on Palo Alto devices. We just migrated from Juniper to PA line. So these might sound silly for people who already are on PA line.Do we have any primary and back up images on PA firewall . Just like in JUNOS if one image is corrupt it tries to load from the back up image file.How many rollbacks does the PA de...

srikanth by • Not applicable
  • 12340 Views
  • 20 replies
  • 0 Likes

Resolved! Static Routes AND BGP on Same Vritual Router?

Could not find explicit answer in manual but Im pretty sure this is possible.Can I use Statiuc Routes AND BGP protocol on the same Virtual Router?Also, if Im able to do this is it a smart idea or am I asking for trouble?Thanks!--CH

choff123 by • L3 Networker
  • 2682 Views
  • 2 replies
  • 0 Likes

Resolved! Need to learn of reports

Hi,I am new to Palo Alto. I was wondering if there is any information that can show me if there is a way to write a search without using the threat Id's on the website.for example if I would like to search for all forms of Zeus how can this be done without haing to put in all 15000 threat Id'sthank you

Resolved! DMZ and Destination NAT using same subnet

We have migrated from a TMG (ISA) and Cisco Firewall deployment to a PAN firewall with the TMG being used to do proxy and URL redirection. We have a /25 IP range from our ISP that is used for public addresses. We currently have the environment configured so that the PAN does Destination NATs to our internal web non-sharepoint sites. The TMG is u...

craymond by • L4 Transporter
  • 7234 Views
  • 5 replies
  • 0 Likes

Resolved! Want to create a security policy based on domain user group.

Hi, I would like to set up a security policy based on a group a user belongs to on my AD. I've set up the LDAP, and USER ID client on the server, but when I go to create the security rule, nothing shows up in the add box for the user. Even if I click the drop down, or start to type the domain/username info. I'm thinking I missed a step, or somet...

Multicast IP-tv streaming thru PA ?

I am struggeling to find information about multicast and PA.I would like to get may multicast running on my lan forwarded to my external site. Currently I have a IPsec tunell running between but the multicast do not need the IPSEC security. I have a WAN connection with pure L2 from my WANprovider. Is it possible to use VWire , policybased forwar...

stig by • L1 Bithead
  • 3917 Views
  • 2 replies
  • 0 Likes

Baseline of Firewall Throughput (Performance)

Hi,I need to be able to create a baseline of firewall throughput. I know that I can view the throughput real time with the "show system statistics" command, but does anyone know a way of monitoring this over time to use in graphs or reports. I would like to have this data so that I know as new projects come up, the firewall can handle the addi...

Milamber by • L1 Bithead
  • 11505 Views
  • 8 replies
  • 1 Likes

Resolved! NTLM URL in PANOS 4.1

We have just recently upgraded our firewalls from 3.1 to 4.1Does anybody know what the ntlm URL is in 4.1?Old link: http://firewall:6080/esp/ntlm.espNew link: ???Each time an admin user logs on remotely to someone’s machine or enters their admin credentials inside their current windows session, the firewall will continue to use those admin crede...

adevine by • L1 Bithead
  • 2696 Views
  • 1 replies
  • 0 Likes

SSL Decryption in PAN 4.1 fails - Firefox warns "ssl_error_rx_unexpected_new_session_ticket"

Since upgrading to Palo Alto Networks 4.1 we often have warnings in several firefox and thunderbird clients. Then we get the error mesage "ssl_error_rx_unexpected_new_session_ticket". This example is from thunderbird:Additionally the behaviour of the firewall to let some SSL communication undecrypted - for instance: on the first click https://ww...

mhuels by • L3 Networker
  • 5973 Views
  • 6 replies
  • 0 Likes
  • 24404 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks