drop-reset application list

Hello,

I found this explanation about TCP REJECT today :

"The deny action used in a security policy will either ‘drop’ or ‘drop-reset’ based on the app being used in the policy.

For most browser-based apps, it is drop-reset - this prevents the browser f

delete URL logs older then 7 days

Hello,

we have the legale requirement to delete access logs (URL Filter is set to "alert") which are older then 7 days.

Is that possible somehow?

We cant accept an answer like "please export your log, delete old stuff and import it again". The logfiles

how to allow the access face book , but block the other social networking sites

Hi,

I am testing paloalto firewall and have a basic question.

How to enable access
to face book to some users , but block the other social networking sites.

I setup a default policy to all users and my default URL policy
is to blocked social networking.

PANAgent show user ip-user-mapping has 0 users

PANAgent seems to be running fine...

show user pan-agent statistics

reports "*connected, ok"

show user pan-agent user IDs

show all users and groups as expected

but show user ip-user-mapping

reports 0 users.

PAN-OS 3.1.8, and I have another firewall (same ve

Password Policy

Hello,

does somebody know how to setup Password Policy for management users in PAN OS 4? I am talking about minimum password length, special characters etc.

Deny search terms

Hello Is it possible to deny search terms if a user searches a term in google eg a student types the word in boobs then clicks images

Major Issues with SIP (VoIP)

Hi Guys,

I am kind of stuck troubleshooting an issue with regards to SIP traffic.  My customer integrated a new Digium Switchvox SIP VoIP in their network.  A couple of weeks ago, the telephone system wasn't working i.e. no outbound and inbound calls

Authentication using LDAP/AD

Hello,

I'm trying to get LDAP authentication working using Active directory. I have created an LDAP server profile, an Authentication Profile and Group Mapping settings profile. When I'm setting up the Group mappings I can go in and see the entire dir

override response page

Hi all

When accessing a URL  category that requires password in order to continue (override) , the return page from PA comes in https and not in http as in regular “Continue” or “Block” page.

Is this behavior is by design? Can it be change to regular h