User ID agent / User-IP-Mapping issue

Hello,

I have simple request: created access rule based by group.(and this part looks clear and working to me). Problem that i can make User-IP mapping to work correctly. With desktops i do not see any issues because their users do not change mostly a

PA-2050 commit frustration

Hello,

We have 2x PA-2050 devices in HA running 3.1.10 and I'm frustrating about commit time, it takes like 5-10 min.

Can I expect significant improvement, commit time speaking, with upgrade to 4.1.5 ?

Field experiences in commit time with 4.1.5 ?

Or sho

Monitor throughput of dataplane using snmp

Hi all

is there a way to monitor the throughput of the dataplane?  I would like to turn on threat protection on my Palo's but I need to be able to log the throughput so I can see the effect it has.  I am monitoring the Dataplane CPU but would like to

Block a particular Google Document

Greetings,

One of my users forwarded me a phishing email that points to Google Docs to collect information (username/password). The URL looks like:  "https://docs.google.com/a/b/c/viewform?formkey=asdfasdfasdfasdf" (not the real url). Is there a way t

QoS Markings

I have a couple pa-500's. I have a voip system that right now sits in front of the FW. I would like to put it behind the FW. If I have my switches and routers currently marking the voip traffic with an ip precedence of 5. Once I move the VOIP systme

question about packet dump about incomplete, insufficient-data and insufficient-data

Hi...

I’d like to a packet dump about incomplete, not-applicable, insufficient-data.

I tried to set a packet dump command like below.

Set application dump on application incomplete

Set application dump on application not-applicable.

Set application dump

DHCP on PA-2050

I have a PA-2050.  When setting up DHCP or modifying an existing configuration is there something I am supposed to do other than Commit the change to make those changes take effect?  Like reboot the thing?

Austin

VLAN's with Palo Alto - Primer/Tutorial?

One of our switches has a couple of untagged connections into our PAN.

Each connection is configured on the PAN as a regular L3 interface with an IP address assigned and the interface is in the appropriate zone.

I'm interested in reclaiming one of the

FIREWALL & PANORAMA

HI

.
I want to know more about panorama.

So my dubt about that.

I have panorama registered on my PAN firewall.IF my panorama stop of work , can i manage my firewall directly on my WEBGUI on firewall ?

Best Regards

Thiago Lima.

Blocking Chat roulette type sites

I would like to block all chat roulette type sites.  Omegle, chatroulette, chatrandom etc.  Unless I am missing something it is not as simple as it should/could be.  They don;t seem to be "applications" and there is not a URL category.

Any suggestions

Discard candidate?

Hello.

I'm new in PAN
To discard the candidate configuration changes, is it the same "Revert to running config" and "Load named config snapshot runningconfig.xml"?

Thanks

Luis

LDAP User Group Issue

All,

We are trying to start building URL filtering.  I'm noticing that when I try and set groups in the "Group Include List" it stops at a certain letter and just gives me the "more" option but I can never finish populating the list.

Any thoughts?