General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! google applications versus localization

Hey guys,I have a theoretical question regarding a issue i had today.A user called and said that google-translate was blocked. I couldn't understand that, since i knew that we've allowed that.I went to http://translate.google.com and sure enough, "Application Blocked".I went to the monitor tab on the firewall web interface and set a filter for g...

question of user-id with not joined active-directory clients

Hello all.Customer has an Active-Directory. But clients are not joined Active-directory. Is it possible to configure User-ID with not joined active-directory clients at the Active-Driectory enviroment??In other words, i don't want to configure user-id with RADIUS, eDirectory, Terminal Services and etc.Thanks,Eugene.

Not-configured message appear on the Interface

Daer Sir,When users compalined there was no browsing, I check the pan-agent status from the cli and came to know that there was no pan agents in the firewall.After that When I check the interfacces, all interfacce were green lighly without a bright green. (Please refer the attcahed doc)and also I saw some messgaes in the log and those are mentii...

Resolved! Ubuntu VPN Client

Is there currently an available vpn client for linux that will attach to a PA-500.

Correlate VPN User to IP

Is there currently an easy way to Correlate a VPN user in trafic logs with the IP the user authenticated from?For now I am having to view the traffic in the Traffic log note the user then goto the System logs and correlate the date / time of the VPN login go see the IP they authenticated from.-Michael

Internet to Shared Gateway

Has anyone used a Shared Gateway for inbound connectivity? For example, if one wanted to host both an "Internet Surfing" Vsys for people to use for outbound Internet traffic and a separate vsys for a DMZ style setup, where users from the Internet would initiate connections into an environment. My real question lies in a scenario where you would ...

admin password not reset to default

Hi all, brand new user. Thrashing around on a new 2050 in test\learning mode. Thru maintenance mode reset system to factory defaults. 3.1.4. The admin\admin id\pw doesn't work. My old passwords don't work either. Anyone know of a admin password that it may be set to? Thanks for any light.

Resolved! ACC Risk Factor

Hi,i would like to know how the ACC Risk Factor is calculated?Best regardsNicolas

Security Profile Exceptions

How would I create a signature exception for a specific source/dest pair within a profile?I want to use the same profile for each type (Antivirus, Anti-Spyware, Vuln Protection, etc) and apply exceptions within with source/dest pair.If I have to create new profiles and control the exceptions by applying a different profile to each policy, things...

Resolved! SSL Decryption Opt-out timeout

Hey I have noticed when I have the SSL Opt-out page turned on about halfway through the day my ssl connections that i have currently running start failing, example. Gmail/gchat start failing to connect. I typically have to open up another tab in my browser and hit an ssl page to be re-prompted for the SSL Opt-out page for my gmail/ghcat clients ...

HA configuration

I just want to check if this configuration of HA active/active is possible on PANOS 4.0.x having single router as gateway and a core switch to connect to internal LAN. From what I have seen in the HA active/active configuration, seems like router and switches are also configured as HA. If this is possible, please help me understand how to config...

Arp issues with L2 failover

Hi guys,We have a new PAN insatllation with a requirement for resilient links to two Cisco core switches running HSRP.We have configured the 2 interfaces on the PAN as L2 interfaces and assigned a VLAN which acts as the layer 3 IP. (see diag attached)When we shut one of the interfaces on the switch connectivity is lost and until we manually clea...

USing PAN in a VoIP Environment (Call Center)

Hello,we just deployed our PA2020 in a VoIP environment and we are having some issues as below :we are experiencing some audio problem on one segment , When we call a remote extention, we cannot hear our correspondent while they can hear us clearly.We noticed that for SIP phones, we are experiencing the same issue. we have checked for any rules ...

Application definition - Java-Update

HiWe allowed file downloads for a group of users under the 'web-browsing' application but when they try to download a Jave update directly from the Java website, the application gets categorized as 'java-update' which is an application we block as we don't want PCs to auto-update Java.Does anyone know the criteria used to hit an application matc...

Resolved! GlobalProtect - Force client connection

Hello everybody,I've configured GlobalProtect and everything seems works good.One thing is not clear for me.If a domain user has the agent on his laptop and he's outside, is there a metod for not avoid the agent?In my test if the user write a wrongh password the agent don't establish the connection and the user can surf internet avoiding corpora...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Resolved! google applications versus localization

question of user-id with not joined active-directory clients