VLAN's with Palo Alto - Primer/Tutorial?

One of our switches has a couple of untagged connections into our PAN.

Each connection is configured on the PAN as a regular L3 interface with an IP address assigned and the interface is in the appropriate zone.

I'm interested in reclaiming one of the

FIREWALL & PANORAMA

HI

.
I want to know more about panorama.

So my dubt about that.

I have panorama registered on my PAN firewall.IF my panorama stop of work , can i manage my firewall directly on my WEBGUI on firewall ?

Best Regards

Thiago Lima.

Blocking Chat roulette type sites

I would like to block all chat roulette type sites.  Omegle, chatroulette, chatrandom etc.  Unless I am missing something it is not as simple as it should/could be.  They don;t seem to be "applications" and there is not a URL category.

Any suggestions

Discard candidate?

Hello.

I'm new in PAN
To discard the candidate configuration changes, is it the same "Revert to running config" and "Load named config snapshot runningconfig.xml"?

Thanks

Luis

LDAP User Group Issue

All,

We are trying to start building URL filtering.  I'm noticing that when I try and set groups in the "Group Include List" it stops at a certain letter and just gives me the "more" option but I can never finish populating the list.

Any thoughts?

4.1.5 withdrawn?

has 4.1.5 been withdrawn - I don't see it on the download page any longer though 4.1.4 and 4.1.6 are there.

if so, why?

Submitting Suggestions

While creating some File Blocking Profile, I discovered a particular file type I wanted to block was not available.  After searching the KnowledgePoint, I came to the realization, that we can't simply add a file type.  Other discussions, pertaining t

tcp_drop_out_of_wnd

Hi,

on PanOS 4.0 I have to disable "tcp_drop_out_of_wnd" check with this command :

>configuration
>set deviceconfig setting tcp drop-out-of-wnd no
>commit

How to disable "tcp_drop_out_of_wnd" check on PanOS 4.1 (4.1.5) ??

Thanks,

Regards.

TCP Timeouts ... Again

I have a bunch of connection, 12 to be exact. From a webserver to a Oracle DB Server. They timeout every 2 hours. 

They pass through a Cisco ASA and a PA 4020. I've created and override rule with a custom app with no timeout. (see attached)

I'm in the

Help - Userid Responsiveness

We're at the point where we want to apply URL Filtering policies based on userid. This means its very important that Pan-Agent is accurately identifying users. We did a test and added a user to a monitored group. The policy started working properly.

possible create a global protect rule base on MAC Address?

is that possible to set sslvpn/globalprotect to check client pc MAC address before they connect? to make sure only valid MAC address able to connect.