General Topics

"ignore-unknown-response" is remained setting. (OS3.1 to 4.0)

HiI did upgrade to PAN-OS 4.0.but, "ignore-unknown-response" is remained.Can't commit.The following error occurs."deviceconfig -> setting -> panagent unexpected here."I Load "running-configuration.xml","ignore-unknown-response" was deleted.I can commit.Is this "ignore-unknown-response" a PAN-OS 4.0 design? or bug?Thanks.Regards, Shunpei ...

User-ID Event Generation

I have a question about the events used to map users to IP's in the firewall.According to documentation, the PA uses three event ID's to map users to IPs: 4768, 4769, 4770.The question I have is this:If a user (say his username is bsmith) is an IT administrator, and also has a username of bsmithadmin with administrative rights (he may use this a...

Resolved! IPv6 NA RA

I'm running the PA-500 in a fully dual stacked mode yet I also want to run a Vlan as pure IPv6. When or is it now possible with 4.1 to have the PA perform ND RA?I've been waiting for this feature for some time now!

Any issues with PANOS 4.0.5?

Has anyone ran into issues with PANOS 4.05?My previous past experience with PANOS 4.0.x was not the greatest.High CPU utilization, network latency, GUI issues, and logging issues were notthe greatest. The end result was tech support and rollback to PANOS 3.1.x.

Resolved! Blacklist threat attackers?

In addition to dropping packets of an attacker (say the RDP Brute Force which I get a lot of), is it possible to auto-blacklist the attacker IP address after a certain number of attempts? It would then block all traffic from that source?

Multiple policies that use URL allow lists?

I have a query regarding multiple rules to allow access to URL whitelists. Let’s say I have rule1 that allows “any” on my LAN to a URL profile that blocks everything but only allows access to url1.com. I then want to have rule2 that only allows “some servers” access to only url2.com. The problem is that the URL filtering profile on the first rul...

How to log all url ?

Hello,In the monitor tab, the traffic log doesn't allow to see url destination. As far as I know, the only place where to see url destination is URL Filtering logs.However, only the url that are part of the URL Filtering objects are logged.My question is : How to make the system log all url ? (as there was an additionnal "url" column in the traf...

Authentication for generic user account

Hi,A client have a several computers with a generic user that logon automaticaly. Actually, with a ISA Server configured as explicit user, the browser prompts user/pass data to access to Internet. What can I do with PaloAlto to make the same? Captive portal is not a solution because all the computers are configured with DHCP option, and I can't ...

Resolved! file blocking continue page issue

Hi,I am using PANOS 4.0.3, and have created a file blocking profile object with action = continue , this should then prompt the user while downloading and on clicking continue, the user should be able to go to download the exe, etc...The issue i am having is that on clicking continue, the browser tries to display the file i am downloading, rathe...

Global Protect Client with OTP

Can the GPC be configured to prompt me for the password when attempting to connect?I'm using RSA tokens but I having real trouble trying to get GPC to work properly with out a fixed password.I'm not sure how I managed it but at one point I did get a password prompt but when entering the password it wasn't masked!!As a systems integrater this nee...

4.1.0 release - should I wait?

How stable? How tested? Is this mostly incremental changes on the inside? The mentioned improvements to the management performance have me very interested, but when I went from 3.x -> 4.0 we had nothing but problems due to a few bugs.I'm now upgrade-wary.

Resolved! GlobalProtect and iPad Configuration

Now that PAN OS 4.1 supports IOS devices connecting to a GlobalConnect gateway is there any change the nice people at Palo Alto will put up some documentation on how to get this configured?Many thanksRod

download pending when need download 'the Generate stats dump'

I want to download the Report stat Dump in GUI . But seems always waitting long....... time - ( pending the download UI , no successfull ) . I guess maybe log file is full need more time to Generate ..( I am using V4.0.5 ) . Is it normal behavior.?. pls advise other way the the dump file .Thanks

PAN Agent 4.1 Setup Guide

Does anyone have a good step by step guide on setting up the 4.1 Pan Agent? The admin guide wasn't much help. I'm getting a no certificate error in the monitor logs of the Agent. Thanks,

Resolved! VWire interfaces down

I am in the process of setting up a new implementation and have not reconfigured from a base install yet other than to set up HA.I plugged in Ethernet1/1 and Ethernet1/2 to a switch across the room, while running the cables I lost track of which was which and was trying to determine which port was which by bringing up the interfaces on the switc...

Discussions

"ignore-unknown-response" is remained setting. (OS3.1 to 4.0)