Applying security policies with security profile groups

Typically, are these applied on the inbound direction or outbound direction of an interface?

And if you wanted to protect an entire zone/interface would you just apply it to any source and any destination?

For example if you wanted to apply Antivirus t

Global Protect

Hi all,

im tryng various option to disable the global protect client on my macbook.

The vpn client works fine, but if i select the disable option with ticket, or with pass code, and try to disconnect from the client it's disconnect without challange or

WMI max allowed entries?

I've seeing the following error in our user id agent logs (3.1 agent).

2012 03 21 11:13:33, Number of pending entries(4540) exceeds max. allowed(1000)

Anyone know about this max limit? Can it be modified? Do failed polls just accumulate indefinetely? W

Proper Reporting

Is there a white paper that goes into detail of what all can be done with reporting?  I need to see a bandwidth to website ratio.  Like facbook traffic accounted for 30% of bandwidth usage today.   I would love to have some sort of a reference guide

Allow skype, but block skype file sharing

Hi

I've been asked if I can use our Palo's to allow skype calls, etc... but block users being able to send/receive files using Skype.  if this possible?

Thanks

Andy

Destination: Public IP that NATs to DMZ private IP

Hi all,

I'm trying to get a better understanding of how a specific request is completed. If an internal private IP, say 10.10.10.20 leaves the provate network behind an IP of 2.2.2.2 and heads to the Internet fine then tries to go to an IP which the f

Cutoff Reports

Our pdf reports are cutting off columns.  The first column is cutoff down the middle and not real sure what else it is cutting off.

DHCP OPTION 161 (FTP)

Hi,

Does anybody know a workaround for adding DHCP option 161 (ftp)?  As far as i know this is not supported at this time, rendering DHCP for thin clients useless.  I'm not that interested in using DHCP relaying.

Palo Alto: Do you have an ETA on this o

Authentication Sequence

I got two AD Domains.

I did the two ldap and two kerberos configs

In the Authentication Sequence ch-dom ist the first one and the second is stebos. They are both kerberos profiles

Users in ch-dom can authenticate. User in stebos get immediatly a auth fa

PDF exploit evasion(33939)

Dear all,

Our device warned us of pdf exploit evasion. (id:33939)

But, no information on that.

Please give me information.

Best regards

tomohiro

A commit is pending. Please try again later.

Hi

I upgraded a few things, and all looks like they are completed, but I can't commit changes now - where can I see what the box is doing and progress?

URL filtering database was upgraded from version 3734 to version 3735 by the auto-update agent