Is it risky to that allow browser-based apps on any ports

I'm considering to create a policy for Internet access to replace traditional Internet rule (i.e. outbound 80/tcp or any other ports raised by user per special request).  To minimize future special request by user, I prefer to allow any ports if app-

PANOS 4.0.1 - Email Alerts are no longer easy to read

Since upgrading to 4.0.1 the email alerts are all in one line, no longer very easy to read.

Can we fix the formatting of the alerts please

Can I not to install user identification agent to the domain controller?

The client would like to use their Active-Directory for user identification in PAN.

However, they are not prefer to install the agent in their domain controller.

Is it possible to install the agent in a computer which has already joined the domain, but

Outbound email traffic is using the public IP assigned to FW external interface

Hi,

New user of PA Firewall here. I noticed that when we send out emails, the recipient is seeing that the email comes from the public IP which is assigned to the external interface of our PA firewall. Before moving to PA, we can see the public IP NAT

Wildcard Cert Import

I'm trying to import a wildcard cert for a domain we own and encouring several problems.  First, I can't seem to import a cert without a pass phrase.  Second, I'm getting the below error even though the name I'm trying to use is only 20 characters:

na

Permit ICMP to dynamic NAT address

I have an odd request. We (pardon the non palo alto lingo) PAT our traffic out a specific address.  We need a way to have our remote global load balancers to ping back to the source address of the users (the PAT address) to create proper load balanci

CAPTCHA Usage with Continue/Response Page

Hello,

Is it possible to use a CAPTCHA with the continue/response URL/Application block pages?

Thanks,

-Paul

VPN authentication OK, user authentication KO

Hello

We have an active directory forest with 2 domains:

The first one as been configured in our PA2020 to allow VPN access through Radius and then we use AD groups to make policies rules.

All works fine. At login, users specify “username” and password

PA-500 alarm led issue

Hi All

I got an issue with PA-500 alarm-led is light and when I debug with cli and someing shown fllowing.

>show log system severity equal critical

2011/07/19 10:01:22critical general        general 0  Chassis Master Alarm: Temperature

2011/07/19 20:10:

Proxy Setup

Hi All; We are integrating a few products that require portal capture and integration with proxies.  Is there a way we can force traffic for http and https to use a proxy with specified settings, this might be a n00b question as I didn't go head to t