Multiple subinterfaces with same VLAN tag

Will the Palo Alto support using the same VLAN tag on multiple L3 subinterfaces?

Palo always resolves rDNS - any way to override?

Let's say you have a single physical host with multiple IP addresses with each IP running one or more websites/services.

DNS best practice is apparently to have PTRs pointing to the physical host name, so you might have:

• PTR hostname.domain.com 1.1.1.1

Documentation for set up PPPoE in PAN OS 3.1.x

Hi ,

Did anyone have an completed documentation or guide on how to set up PPPoE connection in PAN OS 3.1.x?

20mb of free memory left

Is it ok to have only 20mb of free memory left out of 1gb on your 2050 device ?

unable to pass active directory loing in trasnparent mode

hi,

recently i implemented pa-2050 in a network where they have MS-ISA acting as a proxy, the moment i installed the PA i transparent mode front of the proxy it can pass network traffic ( ping telnet etc... ) but the browsing traffic which include int

Updates - problem

Hello,

I have problem with my PA-500 os 3.0.2

When I try to get updates for example software I get Failed to get upgrade info. Please try later.

Policy is just fine, BUT I don't see any traffic going into updates.paloaltonetworks.com.
I setup filter and

Zero-day Vulnerability in Internet Explorer

Microsoft released a security advisory today regarding a zero-day vulnerability in all supported versions of Internet Explorer that can be exploited remotely.

We are working on creating signature to protect against corresponding attack. Please stay tu

Speed Test through Palo Alto pair

Hello group,

We are in the process to set up and replace the current firewall with PA-4020 pairs . During pre-test, one thing came up. Using several Speed Test sites, the results are not what we expected, particularly the UPLOAD speeds are far off .

It

Proxy block

Hi,

we have some clever students...

they have found if they get a proxy address (prior to joining our network) and add it into their firefox they are getting out on the internet and from what they say bypassing the Palo URL check.

Is there a way I can l