unable to pass active directory loing in trasnparent mode

hi,

recently i implemented pa-2050 in a network where they have MS-ISA acting as a proxy, the moment i installed the PA i transparent mode front of the proxy it can pass network traffic ( ping telnet etc... ) but the browsing traffic which include int

Updates - problem

Hello,

I have problem with my PA-500 os 3.0.2

When I try to get updates for example software I get Failed to get upgrade info. Please try later.

Policy is just fine, BUT I don't see any traffic going into updates.paloaltonetworks.com.
I setup filter and

Zero-day Vulnerability in Internet Explorer

Microsoft released a security advisory today regarding a zero-day vulnerability in all supported versions of Internet Explorer that can be exploited remotely.

We are working on creating signature to protect against corresponding attack. Please stay tu

Speed Test through Palo Alto pair

Hello group,

We are in the process to set up and replace the current firewall with PA-4020 pairs . During pre-test, one thing came up. Using several Speed Test sites, the results are not what we expected, particularly the UPLOAD speeds are far off .

It

Proxy block

Hi,

we have some clever students...

they have found if they get a proxy address (prior to joining our network) and add it into their firefox they are getting out on the internet and from what they say bypassing the Palo URL check.

Is there a way I can l

Exporting translations for an IPAM system

I've been working on automated scripts to export my firewall configurations, gather the NAT translations and reformat the exported data into the XML format used by my IPAM system.

I've managed to automate this on our Check Points by parsing the object

HTTP and sql injection by facebook-mail

Hi all,

We recently found a threat "HTTP SQL Injection Attempt" (ID = 30514) with the application "facebook-mail".

We found that information quite strange. What does it mean exactly?

Was there some patterns (for example a SQL specific pattern) in the ma

Data filter - Blocking suspicious downloads

For data filtering we set a rule to alert for certain downloads (such as .bat, .exe, etc).  In the monitor log, all alerts are listed as LOW severity.  I have noticed a pattern where a workstation shows a suspicious download such as game.exe or abyz