General Topics

Major Issues with SIP (VoIP)

Hi Guys,I am kind of stuck troubleshooting an issue with regards to SIP traffic. My customer integrated a new Digium Switchvox SIP VoIP in their network. A couple of weeks ago, the telephone system wasn't working i.e. no outbound and inbound calls were possible. In the beginning I thought it was something issuw with their providers including ...

Authentication using LDAP/AD

Hello,I'm trying to get LDAP authentication working using Active directory. I have created an LDAP server profile, an Authentication Profile and Group Mapping settings profile. When I'm setting up the Group mappings I can go in and see the entire directory tree and pick groups so I know that it is connecting the the AD server and pulling informa...

override response page

Hi allWhen accessing a URL category that requires password in order to continue (override) , the return page from PA comes in https and not in http as in regular “Continue” or “Block” page.Is this behavior is by design? Can it be change to regular http like any other response ?Alon

arp limit

hello whats the arp limit on the 500 device? is it 500? if so whats a work around? mark

Panorama Licensing

Do I still need to purchase a license for Panorama if I only want to make use of the log forwarding functionality. It would be useful if I could forward logs from my PA-4020 to a Panorama installation so that I can store more than a couple of days worth of traffic / threat logs etc. I only have a pair of HA active/passive PA's so I don't need an...

Resolved! Looking for Rule Groups in the firewall policies.

Other firewall vendors provide the ability to group rules together based on whatever criteria you want. I find this very useful in organizing an often confusion rule base. Any plans to add this ?

Resolved! Port masking

Hi Everybody,Is there a way to implement port masking on a PA-200?I have an application that comes from the internet on a different destination port than the default port and I need the PA to change this port back to default value.Example:Http requests come to the PA on the port 1234 and the PA forwards this request to the server on the inside n...

Resolved! How to 'logout' from support portal

Hi all,We can't find the 'logout' option in new version support portal...Is it web page issue？Thanks.

Resolved! Mapping all the rules, interfaces etc..

Is there any way to export or view all the currently configured Rules, interfaces, tunnels etc.. outside of the Palo Alto Admin webpage? What I want to do is be able to get these in some sort of spreadsheet or database so that I can refer back to it without having to log onto the web interface all the time, not to mention it would be a lot faste...

Resolved! PANOS 4.1.0 has a major FLAW

where do should I get support to fix a critical ad major issue with PA 5050 running 4.1.0.When issuing "commit" command the unit drop connenctions and teh arp tables get corrupted for about 30 minutes.As far as PaloAlto Support the issues is major and was discovered two weeks ago when troubleshooting with CB but the fix won't be available for ...

Resolved! Remote Management of PA-200 through SSL-VPN

I would like to be able to reach the web management interface and the CLI of our PA device, while connected through the Global Protect VPN. The networks are on separate segments, and I have access routes and rules in place to allow the traffic to the management IP. However no luck with reaching it. Any advice/help would be appreciated.

Resolved! Rockmelt

I'm doing some test on pa500 in our site, and trying to apply some feature like block of facebook app i see a strange behavior. First of all the policy of decrypt and bloking works correctly because the facebook is in "read only" state without possibility to do i like, or post with all the browser i've tested, but with Rockmelt browser i have fa...

Resolved! PAN-OS HTML Variable <user/> Format?

Hello, I am developing custom Response Pages for our site and have a question concerning the <user/> variable's format. The 'book' says that this variable will have "the username (if available) or IP address of the user". My question is if the user name is available - how is it formatted? (i.e. what does it look like if you have the u...

Specifications for multimode fiber module,.

Hi All,.We are trying to use fiber port in the PA 2050 box, which needs to be directly connect to switch. we used the fiber module ( Multi-mode ) which is same as used at the switch end, But the communication is not happening between the switch and PaloAlto device. Is there any specification for fiber module ( for multi mode )? or did we need to...

QoS performance data.

Hello all.would you please tell me where is the QoS performance data sheet per PA-4000 or PA-2000 or PA-500 series?thank you

Discussions

Major Issues with SIP (VoIP)

Authentication using LDAP/AD

override response page

arp limit

Panorama Licensing