General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

security audit standard for PAN OS

Has anyone developed a PAN-specific security audit standard that can be used for verifying the efficacy of PAN firewalls as a firewall / IPS control?  If so, can you share? Thanks

Resolved! Recommended way to do whitelists/allow lists?

We've just purchased a PA box.

AIUI the recommended way to do a rule that allows (for example) all PC's access to www.domain.com would be to create a URL filtering profile that blocks all categories, and then to add www.domain.com to the allow list of

...

URL Categories different in Panorama than PA Firewall

I have noticed some of the URL categories are different in my panorama box when compared to my PA firewall when creating custom reports. I have verified they are running the same PAN os level (3.1.8). This makes creating custom reports on my panorama

...

Reporting issues - porn sites

I got a very simple request this morning.

Show me logs of user X going to pornography sites.

I have 2 PA-4020s and Panorama. I know this traffic occured but cant generate it in report for anywhere.

This is a very critical and basic need.

Can anyone share

...

jhickey by L3 Networker
  • 4893 Views
  • 8 replies
  • 0 Likes

IPv6 Traffic Report

I have been trying to create a traffic report that summarizes traffic over native IPv6.

Not much progress - any recommendations for creating IPv6 reports would be appreciated.

Thanks!

Respectfully,

Peter Rounds

Network Engineer

Syracuse University

phrounds@

...

phrounds by Not applicable
  • 2244 Views
  • 2 replies
  • 0 Likes

File blocking not working with Hotmail

I've tried to use the file blocking option to ban attachments on Hotmail. But it's not working on me.

1. Created file blocking profile for hotmail application, certain file types and chose both directions -> block.

2. Created security rule with my IP a

...

Memory error on PA-500

I've just noticed this error in system logs:






DP DDR0 ECC single 69, double 37, dimm 0, rank 1, bank 3, row 0x1434 column 0x300


and

DP DDR0 ECC single 65, double 32, dimm 0, rank 1, bank 7, row 0xa5f column 0xf60

Is this memory error and what shoul

...

PAN Agent internal, Management interface external

I run a PA-2020 situated in a data centre.

It is the core router and Internet gateway for a very distributed network, mostly Interent VPNs to the PAN itself.

There are a couple of servers co-located with the PAN, connected to its inside interface.

Due t

...

challenge by Not applicable
  • 2002 Views
  • 1 replies
  • 0 Likes

Unused Objects

Hi All,

Does anyone knows how to weed out the unused objects in the Policies ? e.g I have quite a number of custom objects like services but not all are being used in any policies and I want to clean them up from the Objects so as to be organised.

Any

...

mmxong by Not applicable
  • 2082 Views
  • 1 replies
  • 0 Likes

PAN losing default route in OSPF

Has anyone else had any issues with the PAN losing the advertised OSPF default route in an NSSA. It seems pretty random as it works fine for a couple days and then after a unrelated re-boot its gone. We are running 4.0.2 code on a pair of 4050s.

Thank

...

Resolved! Havij SQL Injection Filter

There doesn't seem to be a filter for this vulnerability at this time so I am trying to write one.  By default the program uses its name in the agent string;

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij

I am trying

...

rodrigum by Not applicable
  • 5692 Views
  • 5 replies
  • 0 Likes

couple of questions of regard to disk.

Hello All.

I’d like to know few things with respect to disk.

1. is it available to change Max disk size on PAN device?

In case of max disk size of PAN2050 is only allocated about45GB by default, even though total size of disk is about 160G.

So, I’d lik

...

willstech by L3 Networker
  • 2968 Views
  • 5 replies
  • 0 Likes
  • 23582 Posts
  • 103 Subscriptions
Top Solution Authors
Top Liked Authors
Labels