This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Using ISA for OWA

Hi AllI'm looking to replace our Fortigate 110c with a new PA-500 and I've managed to write the security and NAT policies which when tested seemed to work well apart from OWA.We have an ISA 2006 server which publishes OWA and OMA on a public IP and have configured the NAT rule and security rule as I did for all the other sites (like Citrix etc) ...

TDC by • L1 Bithead
  • 3795 Views
  • 3 replies
  • 0 Likes

Resolved! Session timeout

Hi All,i want to ask about session timeout setting in palo alto.if we create policy to allow traffic from trust to untrust with service http (custom http port 80)1. what is default session timeout for http traffic?from my testing it will hit web-browsing application event though i create the policy use service instead of application.2. is it a c...

el by • Not applicable
  • 4967 Views
  • 2 replies
  • 0 Likes

Palo Alto in Cisco network with VRF lite

BRosenba asked this question last year. "We've recently purchased an HA pair of PA 5050s. We are planning to utilize the devices in cooperation with some Cisco core switching hardware and VRF lite to segment/secure internal traffic as well as traffic to the Internet." Is there a layer 3 solution with the Palo Alto? The Cisco core switch has tw...

oshcomp by • Not applicable
  • 5490 Views
  • 1 replies
  • 1 Likes

Resolved! Control OWA

Hi I want to stop our users from accessing company email from their home (non company supplied) PCs using OWA. I still want to allow access to our email systems through webmail/httpsCan this be achieved by app filters (MAPI, Active sync) OR do I need to adopt a more granular policy via data filtering and look to block OWA via specific HTTP get r...

djrodb by • L3 Networker
  • 5381 Views
  • 4 replies
  • 0 Likes

New Pan Agent.

We recently installed the new PAN agent 4.1.4.3.Since we installed this we don't seem to be able to get at our LDAP group against which we have many security rules.i have been told that an option exist with userid agent option in the Device tab to define the groups. Having done this the groups are still ignored during rule processing.To compou...

Resolved! CERT_DATE ERROR SSL-VPN Global Protect PanOS 4.1

Hello,I configured the VPN-SSL on PANOS 4.1 using the "Configure Global Protect tech notes" document and the migration from Netconnect to Global Protect. Following these manuals I got this error.(T5448) 01/19/12 12:21:10:825 Debug( 392): CPanHTTPSession::PostRequest: WinHttpSendRequest...(T5448) 01/19/12 12:21:10:887 Error(4909): CPanMSService::...

Resolved! Seperate policy for IPSec VPN and SSL VPN?

So I would like to have different policies based upon what device a user comes in from. If they use Globalprotect with HIP checking, they are given a less restrictive policy. Where as if they come from an iphone with ipsec, they are given a more restrictive policy. Both ipsec and SSL are hitting the same GP gateway. I see no way to differentiate...

Possible false positives - ASP.Net Information Leak Vulnerability

Starting on September 4th we've been seeing multiple "ASP.Net Information Leak Vulnerability" warnings in our logs. They are showing as originating from multiple sources within our internal network. Malware scans come up with nothing on these workstations and we haven't made any changes to anything. Is anyone else seeing these?

Resolved! Mac GlobalProtect = Detected another instance

I just setup SSL-VPN access on our PAN-2020s and downloaded the latest Global Protect Bundle that was released on June 20th, 2012 - v. 1.1.5. I logged into the portal in my mac and installed the version for Mac running OS X 10.7.4 (64bit) and once the application was done installing I get a popup that says "An old GlobalProtect instance exists,...

cmateam by • L3 Networker
  • 25851 Views
  • 12 replies
  • 0 Likes

Resolved! Captive Portal - identify user with certificate

Hello everybody.I have a question regarding captive portal user identification.As everybody know user like Mac, iPhone, Android are difficult to identify and manage without insert credential in captive portal.For wireless policy in all my company device I've installed a user certificate who grant wireless access. i would like to use it for user ...

Will FQDN names work when the name resolves to a content delivery service?

For example:H:\>dig www.microsoft.com; <<>> DiG 9.2.3 <<>> www.microsoft.com;; global options: printcmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0;; QUESTION SECTION:;www.microsoft.com. IN A;; ANSW...

jraleigh by • L1 Bithead
  • 3914 Views
  • 5 replies
  • 0 Likes

Resolved! Adobe Flash Player download showing as virus

The Adobe Flash player download page is being blocked as the following threat:Name: Virus/Win32.encryptedcontainerdeleted;.dwfID: 2488533Severity: MEDIUMDescription: This signature detected Virus/Win32.encryptedcontainerdeleted;.dwfIs there something bugged in the latest Antivirus release? Our PA-500 is on Antivirus release 833-1147.

Captive Portal with VASCO SMS OTP

Hello folks,I hope everyone is doing well, I have been stumped over this issue that I am trying to find an effective solution for. One of our customers have requested the need to verify Guest Wireless Users that connect to the network via a Cisco Wireless LAN Controller. What they want to do is force the Guest Wireless users to register their Ph...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks