General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! 'Resolve Hostname' checkbox

Hi Everyone, There is a "Resolve Hostname" checkbox at the bottom of the traffic log page.It seems that you need to select that checkbox every time you need to display the Hostnames.i.e. If you navigate to any other page and then back to Traffic Monitor page, it clears that checkbox. What if I want to 'always' keep resolving Hostnames? Is th...

rshah by Not applicable
  • 3550 Views
  • 1 replies
  • 0 Likes

Resolved! Link Aggregation to Cisco Switch

How would I go about creating a link aggregation from a Cisco Cat4500-series switch to a PA-5020? I'm shooting for having multiple links between the two devices for redundancy (and load-balancing too, if possible).What would I have to do on the Cisco side of the aggregated link? What about the PA-5020 side of the link?

PSC_IT by L1 Bithead
  • 5512 Views
  • 1 replies
  • 0 Likes

Resolved! System Log Reference Guide - English?

I'm looking for the english version of the sytsem log reference guide for PanOS 4.1. I was able to locate the Japanese version of this document for 3.1: https://live.paloaltonetworks.com/docs/DOC-1788, but putting it through Google translate still leaves a lot to be desired.Any idea where I might be able to find this?Many Thanks,Ken

kwiso by Not applicable
  • 4122 Views
  • 2 replies
  • 0 Likes

Resolved! GlobalProtect VPN and Mac OS 10.8.0

Just updated to the GM release of mountain lion. Seems GP is having some serious issues connecting. Anyone else that has 10.8 having this issue? Anyone from PA aware of the issues? Once the download is generally available I am going to have quite a few mac users looking to upgrade.

Global protect silent install

Hi,Is it possible to install Global Protect silently to workstations which have Netconnect client installed, Netconnect needs to stay on those machines. I have tried the /quiet msi option but this still brings up the dialog box to uninstall the sslvpn which is checked by default.ThanksMei

meijones by L0 Member
  • 3003 Views
  • 1 replies
  • 0 Likes

threat syslog forwarding panorama -> ossim

HI,I have some problems with forwarding threat syslog events from Panorama to OSSIM.We have several PA and they forward their threat logs to our Panorama Appliance via SSLNow we need this Threatlogs at our OSSIM System as well.Because of, Policy restrictions we can not syslog directly from our PAs to our OSSIM System,so i want use the Panorama i...

How to log traffic based on FQDN objects ?

Hello,The traffic log feature is pretty usefull, however when using FQDN objects it becomes very tricky to identify traffic logs. Indeed, I use a lots of groups of FQDN objects, and even groups of groups of FQDN objects. And the traffic logs doesn't display the FQDN but only source and destination IP addresses...Is there a way to display the FQD...

ldormond by L3 Networker
  • 10191 Views
  • 4 replies
  • 0 Likes

C

Does anyone got working credit card regex, as the one listed above is not working plus anyone know how to restrict one credit card transaction over another.

Detecting a lot of spyware, 13190 (Smoke.Loader Command And Control Traffic)

I have a user that's triggering this alert frequently when doing normal Internet browsing. Some detections are to bbc.com and other news outlet sites.. Nothing obvious comes up when analyzing the computer, so I was wondering if I could find out exactly what this signature is looking for. I already checked the Threat Vault and it only provided...

mfcuns by L0 Member
  • 2818 Views
  • 2 replies
  • 0 Likes

Resolved! Blank Threat Description

I'm running Panorama 4.1.6 and am getting threat entries in the logs with no name/description (the attack id is simply repeated in the name field).This is mainly for custom threats (they do include real names and descriptions in the custom objects), but I also have some 'factory' signatures - viruses - doing the same.My Threat/App packages are a...

apackard by L4 Transporter
  • 4787 Views
  • 5 replies
  • 0 Likes

SIP/RTP + NAT - One way audio

Hi all,We are facing difficulties with a plain-in-to out and out-to-in NAT which is configured as described below:- Private to public - Public to private for ports 5060 an 9000-9049 UDP with the PBX address as destination.For some reason SIP signaling works fine, but the incoming RTP stream doesn't come through. The firewall was tested even with...

bsanders by L2 Linker
  • 20023 Views
  • 13 replies
  • 0 Likes

Can't Get AD groups to be used as user authentication

We are running 2 2050 firewalls running 4.16 software and 2 user agents running 4.1.0-43 code. When i try to limit a policy by an AD user name it works fine. However if I want to user a AD group name it wont hit the rule if i put in the user as a group. What am i doing wrong.SoMYAD\mcarlton will work for a user on a policy butMYAD\cooladmin...

mcarlton by L0 Member
  • 3883 Views
  • 2 replies
  • 0 Likes

Resolved! SFP vs SFP+

Anyone know if a 1Gb SFP module will work in a SFP+ slot on a 5050 / 5060? If so, any caveats?

dmcgee by L0 Member
  • 4619 Views
  • 2 replies
  • 0 Likes

Capture Gmail Username

Hi,I am about to finish an evaluation with a customer.He just shared with me a specfic requirement which would make him choose Palo Alto over competitors :Gmail must be allowed, but it must be possible to capture the username used to login to gmail.I have set up Outbound SSL Decryption, however i am struggling with Data Patterns :Normal regex wo...

  • 24450 Posts
  • 125 Subscriptions
Top Solution Authors
Labels