General Topics

Migration help from Fortigate to Palo Alto Firewall

Hello Team ,

Any tool for migration from Fortigate to Palo Alto Firewall.

I want to work via command line of PA .Any link for pa 2020 and 2050 would be helpfull

Thanks

HSharma

PAN OS Packet Capture

I know where and how to start a packet capture on the device.  I would like to know if the capture can be configured to capture only specific parameters (ie src ip, dst ip, src port, dst port).  I don't see those options on the web GUI.

block by Domain Suffix (.xxx)

Looking for a way to block the domain suffix of .xxx

I've created a custom URL catagory with *.xxx (and I also tried *.xxx/) and that works....however It will also block a URL string with.xxx anywhere in the URL (i.e. www.google.com/news/foobar.xxxds

need to forward log to Panorama and do not save logs on Pan

For some reasons, I need to manage all logs using Panorama and the logs can not save on Pan. How can I do to config ? Or the request againsts Pan policy.

How perform a packet capture with a filter for subnet or a vlan-id

Hi,

I need capture some traffic for a specific subnet ( or vlan tag) .

With "debug dataplane packet-diag set filter match" I can only put a single ip's but not subnet.
Neither a vlan-tag can be added in a filter.

Is there any way to do this ?

Tx.

HTTP Tunneling

Wondering how the Palo Alto detects HTTP tunneling and how would a security policy be configured to detect/prevent this situation.

SSL VPN

I just started using PAN 2050 in production and confiuring ssl vpn.  Issue is that after client computer connect to vpn, client computer loses all internet access.  What makes ssl vpn to work so that client computer doesn't lose internet access local

AD Group PDF Summary Report

Hi

I configure PDF Summary report for AD group.The way i did , i create the Custom AD group report and attached this custome report to PDF Summary report.But the  generated pdf summary report doesnt have any data it shows all the the custom report wit

Captive Portal as an option

A few of my rules allow for certain individuals (by way of User-ID) access to download EXE and access most any application.  This of course works fine for PCs that are joined to the domain which makes up 99% of our PCs.  However, for that 1% that are

VPN with fqdn denying ike 500

Hello,

I'm trying to setup a ipsec vpn with a fortigate which has dynamic ip as gateway.

I have a security policy which allows all packets from the dynamic ip (fqdn) but if i type the command 'show log traffic src in x.x.x.x' i can see that i have an i