4.0.2 vs 4.0.1 package update size

Hello,

I noticed a good size difference in package size from .1 (276MB) to .2 (141MB).  When updating from 3.x - is it recommended to start with 4.0.1 and then go to 4.0.2? Or going right to .2 is acceptable? Thanks!

Mike

Vulnerability assessment (False Positives and Evaluation Method)

Is there a good write-up on how the vulnerability assessment is performed and how it actually works?  Specifically, we had a web server set up in front of a MSSQL server -- for hosts connecting to the web server from IP segment "A" it worked fine, bu

Source Host and Destination Name Resolution in Reports

Hello,

This inconsistancy has followed the 3.x code into 4.x code for me.  When I create a report and "run" - I can get source host and destination name resolution.  If I export to PDF or CSV - the name resolution is replaced by the straight IP.  Howe

Authenticating Panorama users with AD

Is it possible to authenticate users using their AD credentials when they log into Panorama? Short of giving administrators their own login into Panorama, I'm unable to track who has changed what.

I've read through the LDAP guide, but it focuses on th

Monitor Memory and Filesystem usage with SNMP

Good morning,

recently I put under monitor PA-2020, but I'm not able to read memory and Disk statistics. Do you knwo how can I get this information? It seems that host MIB is not fully accessible.

More than one Syslog server - performance

Hi all,

does anyone know how the configuration of more than one Syslog server in Syslog profile (to send Traffic and Threat logs) impact the performance of a PAN 2020 device?

I need to send traffic and threat logs to a SIEM and a Syslog server at the s

reports based on users groups ( Panorama )

Hi,

can anyone confirm this is not supported yet with Panorama ?:

I would like to create reports based on user groups with Panorama. I know you can achieve this with a single unit , but i don't think this will work with Panorama. We are even not able t

Split Tunnel

I have noticed that when I connect to the SSL VPN the Split tunnelling restriction I have in place doesn't seem to be working any longer.  I recently upgraded from 3.1.6 to 3.1.8. I also upgraded my laptop client to NetConnect 1.3.  When the VPN is

Logging of blocked HTTP traffic

All,

We have a proxy environment where LAN users requesting Internet sites have to go through the proxy. Our proxy is on the LAN side of the PaloAlto so that traffic goes from User->Proxy->PaloAlto->Internet. There is a rule on the PaloAlto that block

Exchange 2010 CAS in the DMZ

Aside from being not supported by Microsoft, has anyone placed an Exchange 2010 CAS server in a DMZ? It looks like the reasoning behind it was because you'd have to punch so many holes in the firewall, it wasn't worth it. But since the PAN has a litt

Result - Stuck in PENDING

Hi,

I have an antivirus download schedule and install job, but it seems PA FW is
stuck in the Download action. Sine 2 days I have the same result as below.

Enqueued          ID             Type    Status Result Completed
---------------------------------