GlobalProtect Client VPN

Now that we have client VPN functionality via global protect is there any way to force clients to use a proxy over the VPN conneciton?

Thanks

Rod

VSYS and Commit

Hello,

I had a consultant who states that you can commit only the VSYS you modify and not commit the rest of the configuration.  I have looked at some documentation and see no refernce to this.

My question is this:  Is this a fact?  If yes where can I

block flash

Hi

When I "deny" application "flash" - flash is not blocked, do I have it all wrong or?

Thanks

"ignore-unknown-response" is remained setting. (OS3.1 to 4.0)

Hi

I did upgrade to PAN-OS 4.0.
but, "ignore-unknown-response" is remained.

Can't commit.

The following error occurs.

"deviceconfig -> setting -> panagent unexpected here."

I Load "running-configuration.xml",
"ignore-unknown-response" was deleted

.

I can comm

User-ID Event Generation

I have a question about the events used to map users to IP's in the firewall.

According to documentation, the PA uses three event ID's to map users to IPs: 4768, 4769, 4770.

The question I have is this:

If a user (say his username is bsmith) is an IT ad

Any issues with PANOS 4.0.5?

Has anyone ran into issues with PANOS 4.05?

My previous past experience with PANOS 4.0.x was not the greatest.

High CPU utilization, network latency, GUI issues, and logging issues were not

the greatest. The end result was tech support and rollback to P

Multiple policies that use URL allow lists?

I have a query regarding multiple rules to allow access to URL whitelists.

Let’s say I have rule1 that allows “any” on my LAN to a URL profile that blocks everything but only allows access to url1.com.

I then want to have rule2 that only allows “some

How to log all url ?

Hello,

In the monitor tab, the traffic log doesn't allow to see url destination. As far as I know, the only place where to see url destination is URL Filtering logs.

However, only the url that are part of the URL Filtering objects are logged.

My questio

Authentication for generic user account

Hi,

A client have a several computers with a generic user that logon automaticaly. Actually, with a ISA Server configured as explicit user, the browser prompts user/pass data to access to Internet. What can I do with PaloAlto to make the same? Captive

Global Protect Client with OTP

Can the GPC be configured to prompt me for the password when attempting to connect?

I'm using RSA tokens but I having real trouble trying to get GPC to work properly with out a fixed password.

I'm not sure how I managed it but at one point I did get a