General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

How bit torrent works ? PAN OS 4.1

Hi guys ,I want to know how bit torrent works.....First of all , i have a policy that block all trafic by bit torrent.I did other policy to allow some users to use bit torrent. But don`t works this policy.I read this https://live.paloaltonetworks.com/docs/DOC-2391 but i don`t understand so good.So somebody know what i need to do ?Best regards.T...

Resolved! Skype and PBF

Hi all,We have two ISP's connected to our PA FW (4.1.5). ISP A (e1/5) is the default for all outbound internet traffic. ISP B (e1/7) is the backup link. Now we would like to use the backup link for all skype related traffic. Until now I did not have success.I have created the follwoing PBF rule:But skype still gets forwarded to ISP A. Is there a...

use Palo as an NTP device

Hi Guys, We have 2 * 2050's running 4.0.7 here and I was wondering if I could use these devices as NTP servers for other devices to sync against? I've looked through the gui but can't see any way to do it so far.CheersChris

Resolved! About traceroute APP-ID

Hi guys.I found that traceroute APP-ID on Applipedia web-site as belowSo I updated newest signature of Application and Threat that version to my PA box is 303-1361 (2012/04/17) but I could not find the traceroute APP-ID on my box.Why it is deffrent between newst signature and applipedia app-id list? When do I use the traceroute app-id?Thanks.Reg...

Filter length

what is the maximum filter length for the log menus on the Monitor tab? what is the maximum length of a query on a report?I am pretty sure I have exceeded it with the following query:(app eq unknown-tcp) and (zone.dst eq sample.com) and (port.dst neq 23) and (port.dst neq 1023) and (port.dst neq 1098) and (port.dst neq 1108) and (port.dst neq 13...

Resolved! SNMP and 4.1 / 4.1.1

Under 4.0.x we were recording the traffic on the public interfaces of our PA500.After upgrading to 4.1 this stopped working.We dropped 4.1.1 on for other reasons but still no snmp.If I try to do a snmpwalk on the PA500 I get nothing at all.I couldn't find anything applicable in the 4.1 documents.SNMP under Device -> Setup -> SNMP Setup app...

Resolved! How long are keept scheduled report

Hello,how long are keep scheduled report ?can we schedule deltion of reports older than a date ?

Can't Import SSL Certificate from GoDaddy for use on GlobalProtect Gateway/Portal

I recently installed a PA-200 at a client's office and setup GlobalProtect for SSL VPN using self-signed certificates. Now that we are ready to roll into production, we'd like to install a trusted SSL certificate. We purchased a certificate from GoDaddy. The CSR was created on IIS7 (on Small Business Server 2008) and successfully used to crea...

YouTube uploading rule failed...

Hello,recently for testing purposes I create Youtube-uploading rule in order to deny all video uploading's to Youtube server. My disappointing grew when I saw that all video uploading's pass my rule, also when I login on my Gmail through Google Chrome, all Data filtering rules was passed, and I can attach any of forbidden files. With other app's...

security policy rule index number

Hi AllIn PANOS 3.1.x, i can see the security policy index unmber in the GUI, however i can't see it after upgrade panos to 4.0.9 no matter using GUI or CLI.Is there any way to find secutiry policy index number?Thanks.Joy

Resolved! How to configure IPv6 advertising on PAN-OS 4.0.4?

I've set up a global IPv6 address on my interface on PA-2050 btu I can't find any place to advertise the network and router - info to the clients. How can I set up this?CLI-commands?

Palo Alto 5020 - Traffic Monitoring

Hi,I'd like to know if it's possible to enable Netflow version 9 or sFlow on the 5020 (4.0.9)?From documentation I've seen online I think an upgrade is required though I'd like a confirmation of this.Regards,Jake

Multicast - IGMP querier

Hi,I have a question regarding multicast. Our developers plan to deploy a multicast application in on of our DMZ´s.Unfortunately the application generates a lot of sync traffic and this fills up all interfaces in that vlan, because igmp snooping is not working on the switches. As far as i can see this is because there is no IGMP querier on that ...

PBF based on domain/URL/FQDN

After research in KnowledgePoint, I understand application is not recommended to be used in PBF as single session will always be forwarded the same way. i.e. application shifts will not change the forwarding behavior.If we want to forward traffics from internal to specified url URL e.g. www.facebook.com to 2nd ISP, is it possible?Any simple wa...

Asterisk PBX (Gemeinschaft)

I got one Asterisk Digium PBX it runned since october without issues but now it looks like the traffic dosn't get match anymore.I read I could use Application Override. Can someone explain what I need to configure excatly?RegardsGuido

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!