Is it possible that a firewall configured in tap mode block traffic?

Hi,

I have recently installed a pan device in TAP mode, with a port mirroring on a cisco switch that copy traffic to the tap interface. On the policy cofigured to allow all between TAP zone and TAP zone, i have configured default security profiles, sp

"Release Notes" now require a username/password

On my PA-2050 (version 3.1.4 - two boxes in an HA pair) under Dynamic Updates, for just the two Antivirus listings, when I click on Release Notes, a pop-up window tells me "The server updates.paloaltonetworks.com at updates.paloaltonetworks.com requi

ata2.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0.

This morning there were 3 unusual system alerts on our PA-4020:

1.

type: SYSTEM

subtype: general

config_ver: 0

time_generated: 2010/09/29 02:07:32

vsys:

eventid: general

object:

fmt: 0

id: 0

module: general

severity: medium

opaque: ata2.00: exception Emask 0x0 SA

New to PAN - Traffic log Destination column question

Hello,

What information is the Traffic Log's "Destination" column giving me?

We are just setting up a pair of PA-500s and I am perusing through the traffic log and noticed that the destination column doesn't seem to reflect the website destination that

Cannot open group_memebers.txt file, casue is 2!

An error like in the subject occurs in the log. The UIA is unable to read group information, nor IP to Username information.
Tested with 3.1.1 and 3.1.2 version. Server Windows 2003 R2. Please explain what does "cause 2" mean.

Best Regards,

Radek

User is not in allowlist

Running PAN 2020 v3.1.4 using LDAP authentication with eDirectory.  I have a userid that will not authenticate via Captive portal. I am seeing a " User is not in allowlist" error in the System Log.

I have verified that the userid in quesiton is in Se

creating custom reports

hi,

if i create a cutom reports, does it take time to generate data or it gives the report immediatly from data previously collected ?

i mean when i creat a custom report do i have to wait for some time then only i can generate it ot it will be immedia

Additional File Types

Hello,

In light of the recent email worm that utilized the dowload of a malicious .scr file - is there a reason the .scr extension is not availabe in the current file extention list? Is there a method to create custom extensions? The current list is a

Admin users AD authentication HELP

I am trying to configure login to the firewall GUI via Active directory authentication  with virtual systems on, I followed the document "eDirectory and LDAP Authentication with PANOS", but when I configured Administrators on Authentication Profile o

Configuration of authentication profile via LDAP

Hi to all,

we have a PA500 release 3.1.4.

We configure an LDAP server that comunicate with a Windows 2003 DC then we create an authentication profile that use that LDAP server; finally we create a vpn profile that use that authentication profile.

VPN us

Group Updates

We have just moved a new PAN2020 into production and are slowing starting to move users over to the new system.   We are running the following:  PAN2020 v3.14 using the LDAP Agent v3.12.

The firewall is not updating Group changes.  I have the update s