Hello,I must use 100 PAN AGENT (limit of product) for a project. Someone have already test to use 100 pan-agent ( 25 by VSYS*5)?do you know if the Palo alto (PA5060) work fine with this number of pan-agent.regards,ALLE
Hello!just a little question on PBR!PA4020 support PBR in HARDWARE? Which Limitation For PBR?thks,ALLE
Hello guys.As you know that PAN has got a option of session that non-syn-tcp.I have a question about non-syn-tcp.When reject non-SYN first packet was false (when non-syn-tcp was not dropeed) and non-syn-tcp session already establised throught PAN device If non-syn-tcp option were changed to true that makes drop session that established non-syn-t...
I guess it would be a bit biased to ask for Pros vs Cons of PAN in the supportforum of PAN 🙂 but I recently stumbled upon an article (which I wish to share) regarding PAN which I think might be of interrest for most of us in this forum:http://www.cymbel.com/blog/a-response-to-stiennon-analysis-of-palo-alto-networks/Another link (or links) is fr...
Hi Guys,Is there any way on the Palo Alto Firewall and Panorama to generate a Custom Report based on Departments from an Active Directory.For example; me as a user Kal is a part of the Technical Department. Will it be possible to have a report on social networking activity for all the users under Technical Department rather than just Kal as a u...
Hi,we are facing the issue that the user identification is not working properly. I am running PAN OS 4.1.4 on a PA-200 device and User-ID-Agent 4.1.4-3 on a Windows 2008 R2 member server.The UI agent is connected to both the DCs (Windows 2003 servers) and our LAN address is entered in the list of configured networks.Everything shows "green" and ...
Hello All,I have this small question here that I hope can find answers or suggestions.Currently we have a videoconference unit that was connected to the internet via NATting in the PAN ? I am wondering if there is a way to make it non-nat by connecting it to one of the available free interface and make it appear as a internet facing unit. Any su...
I want to allow access to Twitter, but block all other social-networking services.The obvious approach is to allow the Twitter application and then have a rule blocking the social-networking category for web-browsing and ssl, but this doesn't work, Twitter gets blocked also. In order to allow Twitter to work I have to add twitter.com and *.twit...
Hi guys,I was wondering what the best way to handle jdownloader or other download managers? Are they treated as seperate apps? Is the only way to deal with this via QoS policies? I'd love to hear about your experiences.Alex
Hi All,I am confuse if Palo Alto is a forward proxy? Can PAN protect forward proxy server?
Hi, Live Community,Can you please tell me whether or not it is possible to execute a command on the other device in PAN-OS, and see the output (without logging into the other device, for example)?Thank-you so much,Dan Sullivan
So I dont know if its just us but we are getting hammered with phishing requests to google docs web sites. The latest is:https://docs.google.com/a/smps.k12.ok.us/spreadsheet/viewform?formkey=dGdKTFpTcW5KVVF1UGxJTFJ0aF9UdHc6MQMy URL Filter wont block this because it is SSL. It can read the cert which points to *.google.com but not the specific UR...
Hi all, I am configuring PA 5050 and populationg the security policy rule base. While i am making ule bases , and during commit , i am geting the error message that the Rule3 (suppose rule 3 ) is shadowning Rule 4 in the sequence. I am getting this error repetidly while I am making policies, although there is no resemblence in any filed in Rule ...
Hi Guys ,I have a dubt about HA Active/passive How it`s works ? i need to have a float IP ?OR my 2 appliances need to have the same configuration ?I see some docs , but i don`t understand how HA works.So if somebody can help me I`m using 4.1.3 PAN-OS.Best Regards.Thiago Lima.
Hello,I have simple request: created access rule based by group.(and this part looks clear and working to me). Problem that i can make User-IP mapping to work correctly. With desktops i do not see any issues because their users do not change mostly at all. Major problem is with laptops. Users migrates between meeting rooms, use wifi and comes ba...
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
| Subject | Likes |
|---|---|
| 7 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
