General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

question about part of CPU log in mp-mointor.log.

Hi. I've generated a Tech support file on the PAN device and then look into mp-moniotor log.I can't understand the part of log during look into the mp-monitor. question is below.1. What command have a print like below on the screen? i know one of command to see the mgmt resource like below. "show system resource". but it shows different...

idle timeout 0 not working?

We have a couple of machines that are set to display the PANOS web UI Dashboard so that we can see the current Risk Factor and System Resources, etc... so we set the Authentication Settings Idle Timeout to 0 so that the sessions do not time out, as indicated by the help. However, they still do time out. Is there something else we need to change...

Demo Rules Examples from Real-Life???

I am looking for documentation of example rules (Real-World rules) much like Checkpoint has if you run their SmartDash board in demo mode. It illustrates a large corporation's simple to complex rules for about every rule you can thing of. A novice to veteran can learn from these example rules. I can't find anything like it in KnowlegePoint bu...

PAN application for Ironport updates

Hello,I have an Ironport behind my PAN. In the logs, I can see it going toward the Cisco update server.Nevertheless, the application is sometimes "web-browsing" and sometimes "http-video".Do you meet the same behavior?Regards,Guillaume Dupuis

IP to User Mapping Error

Hi,I'm having problems in resolving IP address to usernames. PA2050 is integrated with active directory to resolve IP address to usernames. We also create security policies based on usernames. This configuration works great in version 3.1.6 but after the upgrade to version 4.1.4 we encountered errors. Some IP addresses are unable to resolve to t...

Resolved! Question regarding initial configuration / setup

Hi, Everyone,I have a question that I was hoping I could recieve some help with; I am doing an initial configuration of my firewall (I am new to Pan-OS, and I can't seem to ping my upstream router). I have an 802.1q trunk link coming into my device with a single VLAN on it (VLAN 3357). When I do a packet capture, I see the hearbeat traffic fo...

Resolved! Mac of local layer 3 VLAN interface

Hi, EveryoneI am sorry I am posting a few questions today I am still learning the PAN-OS platform and this is kind of a basic one; is it possible to tell the MAC address of a local layer 3 VLAN interface? I can ping it, and verify that the IP address is configured locally on the interface, however the MAC does not show up in the local VLAN inte...

Firefox11 log details not showing up

I have updated to firefox 11 and now the log details window starts to pop up but just sits there spinning trying to display the data.I have tried this on a linux installation and windows as well. Is anyone else experiencing this and if so other than backing down version is there a fix for this?Thanks in advanceMike

How to confirm Email Scheduler send test email

Hi AllI would like to set a Daily schedule report and send it by Email Scheduler, the gateway of email server profile is our smtp-relay server(win2003 smtp service), and it will transfer all email request to Exchange server, all in our environment client can send email normally, however when i complete settings and click "send test mail" button ...

ftp server

Hello,I can't make active ftp working.My ftp server is internal server (IP is public).My policy accept ftp application on default ftp application in inboud (Internert -> ftp server).How to make active session works ? Passive works fine.Thanks.Franck.

Resolved! QoS with virtual Wire

Hi guys....It`s possible to create QOS when PAN firewalls was deploy on virtual wire mode ?Best Regards.Thiago Lima.

How bit torrent works ? PAN OS 4.1

Hi guys ,I want to know how bit torrent works.....First of all , i have a policy that block all trafic by bit torrent.I did other policy to allow some users to use bit torrent. But don`t works this policy.I read this https://live.paloaltonetworks.com/docs/DOC-2391 but i don`t understand so good.So somebody know what i need to do ?Best regards.T...

Resolved! Skype and PBF

Hi all,We have two ISP's connected to our PA FW (4.1.5). ISP A (e1/5) is the default for all outbound internet traffic. ISP B (e1/7) is the backup link. Now we would like to use the backup link for all skype related traffic. Until now I did not have success.I have created the follwoing PBF rule:But skype still gets forwarded to ISP A. Is there a...

use Palo as an NTP device

Hi Guys, We have 2 * 2050's running 4.0.7 here and I was wondering if I could use these devices as NTP servers for other devices to sync against? I've looked through the gui but can't see any way to do it so far.CheersChris

Resolved! About traceroute APP-ID

Hi guys.I found that traceroute APP-ID on Applipedia web-site as belowSo I updated newest signature of Application and Threat that version to my PA box is 303-1361 (2012/04/17) but I could not find the traceroute APP-ID on my box.Why it is deffrent between newst signature and applipedia app-id list? When do I use the traceroute app-id?Thanks.Reg...

Discussions