hello can you use data filtering as a block if a user types those words in google search? eg someone types football hits search but block due to the data filter? is this possible? mark
Hello everyone,Our PA's are using the thread prevention system which drops traffic that is trying to exploid vulnabillities, do DoS attacks etc.All works very nice - but it's only affecting the attempt on an individual basis.F. ex. - someone performs a "DNS ANY Queries Brute Force DOS Attack" and gets blocked. But then the same source re-tries s...
hello everybody,I configured an interface, ethernet/5, with ip 192.168.230.1/29 and connected to a device with ip 192.168.230.3/29Theres no way i can see each other, cannot ping PaloAlto from the other device and vice versaIve already changed cables, changed IP ranges, changed network mask, changed interface port, added a managment profile to th...
I'm looking for an option which will disable an interface if a remote gateway is not available.This option exist for ipsec vpn (tunnel monitor) but I didn't find it for an L3 interface.For exemple, I want to use an interface for outgoing traffic and a backup interface if the gateway of the first link is down.It works fine if I shutdown the inter...
Hello,I found this explanation about TCP REJECT today :"The deny action used in a security policy will either ‘drop’ or ‘drop-reset’ based on the app being used in the policy.For most browser-based apps, it is drop-reset - this prevents the browser from spinning while retrying.For client-server apps that are based on http (or other protocols th...
Hello,we have the legale requirement to delete access logs (URL Filter is set to "alert") which are older then 7 days.Is that possible somehow?We cant accept an answer like "please export your log, delete old stuff and import it again". The logfiles are not allowed to leave the appliance.Thanks in advanceJörg
Hi everyone!I've configured a zone protection profile with SYN Flood protection and SYN Cookies enabled. In the same profile I've set the option "Reject Non-SYN TCP" to "no". I've applied this profile to my untrust zone and run a commit.When I run the CLI command show session info i noticed that under session setup TCP - reject non-SYN first pac...
Hi,I am testing paloalto firewall and have a basic question. How to enable accessto face book to some users , but block the other social networking sites.I setup a default policy to all users and my default URL policyis to blocked social networking. Then I created another policy for a group of people, and on application levelchoose face book an...
Is it possible to create a Security Policy with the Destination address as a URL? I would prefer to use the URL to avoid using the IP in case the destination service changes it.Thanks,Dennis
PANAgent seems to be running fine...show user pan-agent statisticsreports "*connected, ok"show user pan-agent user IDsshow all users and groups as expectedbut show user ip-user-mappingreports 0 users.PAN-OS 3.1.8, and I have another firewall (same version) using the same PANAgent without issue.Any/all thoughts/comments greatly appreciated. Best...
Hello,does somebody know how to setup Password Policy for management users in PAN OS 4? I am talking about minimum password length, special characters etc.
Hello Is it possible to deny search terms if a user searches a term in google eg a student types the word in boobs then clicks images
Hi all,Is it possible to use AD groups in Panorama reports and monitoring? We have successfully configured user-id and group mapping on our devices, and we can utilize user id in Panorama as well. What I have not been able to do is use AD groups in Panorama. I get the "unknown group" error. I have seen a couple of threads discussing Panorama get...
Hi Guys,I am kind of stuck troubleshooting an issue with regards to SIP traffic. My customer integrated a new Digium Switchvox SIP VoIP in their network. A couple of weeks ago, the telephone system wasn't working i.e. no outbound and inbound calls were possible. In the beginning I thought it was something issuw with their providers including ...
Hello,I'm trying to get LDAP authentication working using Active directory. I have created an LDAP server profile, an Authentication Profile and Group Mapping settings profile. When I'm setting up the Group mappings I can go in and see the entire directory tree and pick groups so I know that it is connecting the the AD server and pulling informa...
TomYoung
on:
Device Security license
| User | Likes Count |
|---|---|
| 6 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
