General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! How to set up Active Directory user ID?

Hello,

I am new the Palo Alto networks firewall device (model PA-500).  I have it deployed in my environment but am just letting it pass all traffic right now; I want to get a handle on the traffic before I start limiting things.  In any case, I would

...

synapse by L0 Member
  • 4839 Views
  • 5 replies
  • 0 Likes

Resolved! Websense, WCCP, ETC.

We have an ASA that has a websense connector that allows us to route websense request back to the cisco firewall. I would love to replace with your product. Does the Palo Alto have any functionality like this?

Data pattern strange behavior

Hi,

I'm trying to enable some data patterns in order to block banking informations going out from the network.

Model PA-500 PANOS 4.0.2

The first task is to block Italian IBAN code starting from Checkpoint's DLP blade pattern. This is the regex extracte

...

zanonibs by Not applicable
  • 3631 Views
  • 2 replies
  • 0 Likes

Resolved! About DIPP

Hi guys.

I checked the specsheet of PA5000 series that showed DIPP, Unique destination IPs per source port and IP, for NAT. but I cannot understand clearly that meaning.

What is DIPP means and when do I use that function?

Thanks.

Regards.

Roh.

ttongfly by L3 Networker
  • 3144 Views
  • 3 replies
  • 0 Likes

Is DHCP Logging for lease-start possible

Hi All,

We have got a captive portal set up for guest access which terminates on our Palo Alto firewalls. To meet our code of connection we need to capture DHCP lease offers but by default this does not seem possible.

DHCP lease ends are sent to the sy

...

URL Filtering based on AD Group membership

I'm trying to created a URL filter that only applies to a specific AD Group.

I have a URL filter that applies to all known and unknown users, but it's fairly restrictive.  I have a group of users that require a slightly less restrictive URL filter.

The

...

PBF policy not working.

Hi,

I have packets that arrive on interface eth1/10 that I need to be forwarded back out of eth1/10 with a next hop address of another router on that subnet. I have created a pbf rule that I hope would achieve this however it is currently not working.

...

debsPal0 by Not applicable
  • 1800 Views
  • 1 replies
  • 0 Likes

Resolved! Application usage – Implement Time limit

I would like to schedule certain application for user to use.  Here are the examples.

User can use You-Tube or http-audio only 30 minutes per day.

Or

User can only use You-Tube / other streaming media between 9:00-9:30 am and then 5:00pm - 6:00 am .

User

...

ssarcar by Not applicable
  • 2620 Views
  • 3 replies
  • 0 Likes

Comprehensive IANA service port listings

[SO] I'm putting together a configuration and I'm wondering if I'm doing any duplicate work that maybe some other PA customer has already done and may be willing to share. I'm creating service definitions that are IANA defined for example:

set service

...

bjaming by Not applicable
  • 4562 Views
  • 9 replies
  • 0 Likes

Resolved! QoS Question

All,

I am trying to wrap my head around QoS and how it functions.  What I want to do is to limit the download rate of streaming media.  I understand the rule creation and placement.  I assign my QoS policy to my trusted zone interface so that the dow

...

tohoken by Not applicable
  • 2101 Views
  • 1 replies
  • 0 Likes

Resolved! IPS Signatures

Hi, does anyone know if PAN retires somehow the old IPS signuters?

Into the update bulletin there are informations only for new and modified signatures, not for the retired ones.

For example yesterday night I received the PAN bulleting and Cisco. In th

...

zanonibs by Not applicable
  • 2815 Views
  • 2 replies
  • 0 Likes
  • 24204 Posts
  • 100 Subscriptions
Top Liked Authors
Labels