I figured it out !
Short question:Is inbound SSL decryption possible in vWire and/or Tap mode?Regards, Andreas
Hi, all we would like to better understand the QoS for setting "guaranteed"The question is: the "guaranteed" is pre-allocated or it's dynamic configuration?Suppose to have:5 Mbps of total bandwidth available; if we set guaranteed to 3 Mbps for calss 1 this means that default class(4) has automatically 2 M? Or the default calss (4) has a bandwidt...
Has anyone dealt with this url before? It seems like it's trying to call home as soon as my machine login and it's reating some issue with some of my user. Wonder if Palo can recognize it for now it just saying web-browsing app.thanks.
Hi,I have the PAN devices in the main datacentres that do DNS lookups for all clients globally. What I am trying to figureout is how to have those servers forward to the PAN and the PAN proxy off to external servers then filter the returns based on a URL filtering policy. Thus not having to use a service like Open DNS. The standard URL filtering...
Hey all,I'm coming over from the Cisco world and trying to setup two separate remote access VPNs but using the same gateway IP. My understanding is that normally with the PA you can use the security policies to differentiate users and provide access restrictions to different users that way.Say though you wanted two different remote access VPNs e...
With GlobalProtect Client 1.1.2-9 on Win 64bit is a Problem when you enter here a DNS Name instead a IP Adress.It worked with Client 1.1.1-9, so all users who did the Update hat the problem!On 32bit Windows System it still works with a dns name, but not anymore on 64bit!!
We have a user who says once we moved to our new Palo Alto box from Cisco ASA he is having a odd issue.He claims that Squawkbox works fine as long as he is talking but if he just listens after 2 or 3 min. He looseshis audio until he speaks. To me it sounds like he is having some kind of session time out. But I am new toPalo and know nothing of S...
Which version of TS Agent can I install to support WIN2008 TS with PANOS 3.1.10 ?Can I install TS Agent 4.1 with FW PAN OS 3.1.10 ?
Do you need to have a valid URL filtering subscription for SSL Decryption to work?ThanksRod
Hi Guys,I am looking for a Disater Recovery through USB for PA firewalls. Can anyone provide me the doc.
1. Policy profiles a. enable applications (one day to enable) i. tweak applications (several days at least, maybe two weeks at most) ii. wait until stability achieved b. enable antispyware (one day to enable) i. tweak (one day, maybe several days at most) ii. wait until stability achieved ...
Hello all,I'm trying to understand how Kerberos authentication works on the PAN. From what I understand is that Kerberos does not send any passwords over the network but generates tickets.1) When a user logs on a SSL VPN portal which is configured for Kerberos authentication, the user types in the password. But how handle the PAN the password? T...
I have configured a PA500 to use Wildfire but in the dashboard I don't see any files being examined.While downloading an .exe I get the page to continue and I see in the Data Filtering Log, action Forward.Inspecting the system log doesn't show any info on Wildfire.On the Wildfire dashboard nothing happens even after a few days.Today I tried a ma...
We have a security rule: Src Zone: InternalSrc User: AnyDest Zone: AnyDest Add: AnyApplication: Application filter which inlucde all online videos (e.g. adobe-media-player, http-video, tvb-video, youtube-base)Action: Deny It works as expected, however some users need to view some business video now. Is there any option to configure 'override' as...
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
| User | Likes Count |
|---|---|
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
