General Topics

security audit standard for PAN OS

Has anyone developed a PAN-specific security audit standard that can be used for verifying the efficacy of PAN firewalls as a firewall / IPS control?  If so, can you share? Thanks

URL Categories different in Panorama than PA Firewall

I have noticed some of the URL categories are different in my panorama box when compared to my PA firewall when creating custom reports. I have verified they are running the same PAN os level (3.1.8). This makes creating custom reports on my panorama

Reporting issues - porn sites

I got a very simple request this morning.

Show me logs of user X going to pornography sites.

I have 2 PA-4020s and Panorama. I know this traffic occured but cant generate it in report for anywhere.

This is a very critical and basic need.

Can anyone share

IPv6 Traffic Report

I have been trying to create a traffic report that summarizes traffic over native IPv6.

Not much progress - any recommendations for creating IPv6 reports would be appreciated.

Thanks!

Respectfully,

Peter Rounds

Network Engineer

Syracuse University

phrounds@

File blocking not working with Hotmail

I've tried to use the file blocking option to ban attachments on Hotmail. But it's not working on me.

1. Created file blocking profile for hotmail application, certain file types and chose both directions -> block.

2. Created security rule with my IP a

Memory error on PA-500

I've just noticed this error in system logs:

DP DDR0 ECC single 69, double 37, dimm 0, rank 1, bank 3, row 0x1434 column 0x300

and

DP DDR0 ECC single 65, double 32, dimm 0, rank 1, bank 7, row 0xa5f column 0xf60

Is this memory error and what shoul

PAN Agent internal, Management interface external

I run a PA-2020 situated in a data centre.

It is the core router and Internet gateway for a very distributed network, mostly Interent VPNs to the PAN itself.

There are a couple of servers co-located with the PAN, connected to its inside interface.

Due t

Unused Objects

Hi All,

Does anyone knows how to weed out the unused objects in the Policies ? e.g I have quite a number of custom objects like services but not all are being used in any policies and I want to clean them up from the Objects so as to be organised.

Any

PAN losing default route in OSPF

Has anyone else had any issues with the PAN losing the advertised OSPF default route in an NSSA. It seems pretty random as it works fine for a couple days and then after a unrelated re-boot its gone. We are running 4.0.2 code on a pair of 4050s.

Thank

App, Category, Subcategory and Technology description

Hello,

I'm looking for a pdf or other electronical document document where the application are described and also where Subcategory definition is described.

For exemple I'd like to know what are the proprieties of application like remote-access subcate