Hello,ms-rdp modified in application version 331. Could paloalto offer more detail modification about ms-rdp in version 331?Thanks.
Could not find explicit answer in manual but Im pretty sure this is possible.Can I use Statiuc Routes AND BGP protocol on the same Virtual Router?Also, if Im able to do this is it a smart idea or am I asking for trouble?Thanks!--CH
Hi,I am new to Palo Alto. I was wondering if there is any information that can show me if there is a way to write a search without using the threat Id's on the website.for example if I would like to search for all forms of Zeus how can this be done without haing to put in all 15000 threat Id'sthank you
We have migrated from a TMG (ISA) and Cisco Firewall deployment to a PAN firewall with the TMG being used to do proxy and URL redirection. We have a /25 IP range from our ISP that is used for public addresses. We currently have the environment configured so that the PAN does Destination NATs to our internal web non-sharepoint sites. The TMG is u...
Hi, I would like to set up a security policy based on a group a user belongs to on my AD. I've set up the LDAP, and USER ID client on the server, but when I go to create the security rule, nothing shows up in the add box for the user. Even if I click the drop down, or start to type the domain/username info. I'm thinking I missed a step, or somet...
I am struggeling to find information about multicast and PA.I would like to get may multicast running on my lan forwarded to my external site. Currently I have a IPsec tunell running between but the multicast do not need the IPSEC security. I have a WAN connection with pure L2 from my WANprovider. Is it possible to use VWire , policybased forwar...
Hi,I need to be able to create a baseline of firewall throughput. I know that I can view the throughput real time with the "show system statistics" command, but does anyone know a way of monitoring this over time to use in graphs or reports. I would like to have this data so that I know as new projects come up, the firewall can handle the addi...
We have just recently upgraded our firewalls from 3.1 to 4.1Does anybody know what the ntlm URL is in 4.1?Old link: http://firewall:6080/esp/ntlm.espNew link: ???Each time an admin user logs on remotely to someone’s machine or enters their admin credentials inside their current windows session, the firewall will continue to use those admin crede...
Since upgrading to Palo Alto Networks 4.1 we often have warnings in several firefox and thunderbird clients. Then we get the error mesage "ssl_error_rx_unexpected_new_session_ticket". This example is from thunderbird:Additionally the behaviour of the firewall to let some SSL communication undecrypted - for instance: on the first click https://ww...
HiI've just rolled out the Global Protect client (version 1.1.6) to some contractors that need remote access to our network. I've got it setup as follows:Portal config - Client ConfigurationOptions:- On DemandAgent: Enable advanced view - true User can save password - true Passcode - blank Confirm - ...
Hi, Would I able to do HA between PA-2500/PA-200 and PA-500 or PA-500 and PA-200?would it be active/passive or active/active ?please advice.
When I create new administrator accounts the accounts cannot login. The palo alto system logs shows invalid username/password, but the name and password are being typed correctly. anybody have any ideas why.
Hi all!I am newer and I meet some problems with PA 2050I want use PA 2050 to monitor traffic in my network.I setup PAN in Mode Layer 1 ( virtual wire)I setup Polices is aler ( not block - i sure it)I have a proxy, client can access internet through Proxy or not, all ok!But after i put PAN, client can't not access internet through Proxy,but if cl...
Hi,I want to use my iphone and ipad devices automaticly to connect throught Global Protect to internal network and they will use as internet their own connection.Just for internal access they will use Global Protect.The real question is : when we configure this for the phones, Do we have a option that iphone user will always be connected to Glo...
When the Wildfire Automatic Signature gets distributed via the daily AV updates, is it safe to assume that the only AV Profile that gets the block action for the new signature is the "default" or do all of the AV Profiles that have been created get the block action?
| Subject | Likes |
|---|---|
| 7 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 7 | |
| 4 | |
| 2 | |
| 2 | |
| 2 |
