General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

PAN 500 - 4.1.2 - Bypass Mgmt Interface

Hi,I am pretty new to PAN Firewalls, and my question is really basic.I would like to use only two interfaces on my Firewall : ethernet1/7 as my Lan and ethernet1/8 as my Internet Acess.I would like to avoid using Mgmt Interface port.I have found a thread which explains how to enable management on any interface through CLI. And it did worked well...

QoS on application

I figured it out !

Inbound SSL decryption in vWire and Tap mode

Short question:Is inbound SSL decryption possible in vWire and/or Tap mode?Regards, Andreas

Resolved! Qos Guaranteed

Hi, all we would like to better understand the QoS for setting "guaranteed"The question is: the "guaranteed" is pre-allocated or it's dynamic configuration?Suppose to have:5 Mbps of total bandwidth available; if we set guaranteed to 3 Mbps for calss 1 this means that default class(4) has automatically 2 M? Or the default calss (4) has a bandwidt...

Resolved! g.ceipmsn.com

Has anyone dealt with this url before? It seems like it's trying to call home as soon as my machine login and it's reating some issue with some of my user. Wonder if Palo can recognize it for now it just saying web-browsing app.thanks.

URL Filtering - DNS Proxy

Hi,I have the PAN devices in the main datacentres that do DNS lookups for all clients globally. What I am trying to figureout is how to have those servers forward to the PAN and the PAN proxy off to external servers then filter the returns based on a URL filtering policy. Thus not having to use a service like Open DNS. The standard URL filtering...

Multiple Remote Access VPNs, same gateway IP?

Hey all,I'm coming over from the Cisco world and trying to setup two separate remote access VPNs but using the same gateway IP. My understanding is that normally with the PA you can use the security policies to differentiate users and provide access restrictions to different users that way.Say though you wanted two different remote access VPNs e...

Bug in Global Protect Client 1.1.2-9

With GlobalProtect Client 1.1.2-9 on Win 64bit is a Problem when you enter here a DNS Name instead a IP Adress.It worked with Client 1.1.1-9, so all users who did the Update hat the problem!On 32bit Windows System it still works with a dns name, but not anymore on 64bit!!

Microsoft flight simulator Squawkbox issue

We have a user who says once we moved to our new Palo Alto box from Cisco ASA he is having a odd issue.He claims that Squawkbox works fine as long as he is talking but if he just listens after 2 or 3 min. He looseshis audio until he speaks. To me it sounds like he is having some kind of session time out. But I am new toPalo and know nothing of S...

Resolved! PAN OS 3.1 with TS agent foe WIN2008

Which version of TS Agent can I install to support WIN2008 TS with PANOS 3.1.10 ?Can I install TS Agent 4.1 with FW PAN OS 3.1.10 ?

SSL Decryption

Do you need to have a valid URL filtering subscription for SSL Decryption to work?ThanksRod

Resolved! USB Recovery for PA2020

Hi Guys,I am looking for a Disater Recovery through USB for PA firewalls. Can anyone provide me the doc.

DRAFT: Procedure to add Antispyware, Threat, & URL Filtering

1. Policy profiles a. enable applications (one day to enable) i. tweak applications (several days at least, maybe two weeks at most) ii. wait until stability achieved b. enable antispyware (one day to enable) i. tweak (one day, maybe several days at most) ii. wait until stability achieved ...

Kerberos Authentication

Hello all,I'm trying to understand how Kerberos authentication works on the PAN. From what I understand is that Kerberos does not send any passwords over the network but generates tickets.1) When a user logs on a SSL VPN portal which is configured for Kerberos authentication, the user types in the password. But how handle the PAN the password? T...

Wildfire not showing any files.

I have configured a PA500 to use Wildfire but in the dashboard I don't see any files being examined.While downloading an .exe I get the page to continue and I see in the Data Filtering Log, action Forward.Inspecting the system log doesn't show any info on Wildfire.On the Wildfire dashboard nothing happens even after a few days.Today I tried a ma...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

PAN 500 - 4.1.2 - Bypass Mgmt Interface

QoS on application