Block access to sites with invalid SSL cert

Hi,

I could not find a way to block access to sites with invalid (self signed, expired) ssl certifcates. Any Ideas ?

PAN OS 4.1.3.

rgds Roland

Slow commit

Hi,

I'm running the latest firmware from PAN on a PA-500.  Not long ago the commit was pretty fast, like 1 minute or so.

I haven't done any major changes, but i've noticed the commit has become gradually slower as time passes.  Now its really slow!

Can

Report for Candidate Confiuration

show config candidate can show candidate file, is it possible to create a report for candidate configure output?

Thanks

Simey

Console Cable Scrolling

I am having issues with console cable connectivity and scrolling when working in a box.  Basically the short of it is, no matter what console program I use, albeit putty; I get about 40 lines shown, and when I go to view more it overwrites the bottom

Odd App ID

So, interesting thing.  We use a PA-500 for our enterprise guest networks.  We currently have a couple rules that go like this:

1.  Allow guest networks to use Skype / Skrype-Probe

2.  Block guest networks from using Risk 4 and 5 P2P  (this catches stu

Customize url report

Hi everyone,

     I use PAN-OS 3.1.6, I want to customize url report by filter some website don't show in my customize url report. I try use filter by url and operation is "!=" but it doesn't work. How I do it ?

Captive portal authentication with Radius/AD

Hello

     I try PAN-OS 4.1.3, I use captive portal authentication with Radius/AD. I config user in WiFi zone access to any zone must authentication with captive portal. It work normally. But I try set Proxy server and user in WiFi Zone config Proxy I

Drop DSCP marked traffic

Hi,  I am looking for a way to define a DSCP value as a condition for a rule.  I would like to drop traffic that was previously marked before entering the PAN FW. 

Any ideas?

Thanks!

Prevent virus with Data Patterns

We are receiving some spam e-mails that containing links to zipped exe files with malicious code.

All the exe files have in common a series of underscore characters, for example: fattura.pdf_________________.exe or informazioni.pdf____________________