Hi,do u have any idea about palo-alto box support "proxy arp" and icmp redirect?regards
Hello, Everybody,we would like to download all the image files of the different PanOS versions we are using, in order to have a local copy of such files.We have downloaded and stored 5 image files with no problem, but when we try the sixth image, it is downloaded, but then we find out that one of the previously stored files has been deleted...Do...
I'm migrating a traditional layer 4 firewall policy to PAN firewall. I'm wondering if I should convert all policies to application id based, or I should leave it as service ports based, or I should do both (i.e. app-id + server ports)?Thank you.
Hi,I'm running OSPF on my PA-2050 box.I'm doing NAT for a specific subnet and I would like to distribute this subnet with OSPF.Original subnet 192.168.21.0/24NAT subnet 192.168.221.0/24Neighbor routers only knows 192.168.21.0/24, how can I send the NAT subnet ?
Hi all,Are there anyone found URL Filtering log like below:*.dropbox.com/*.settrade.com/*.facebook.com/What does " * " means?
When icmp is specified as an application in a rule, it appears that icmp requests and replies do not match that rule. The application ping must be added to the rule for a match to occur against echo request and echo reply packets. Isn't ping a subset of the icmp protocol as a whole? I understand how to make this work by adding the application...
Is there a way to restrict internet access to a device so that it can only get out to a particular website?
Is there an easier way than to force a user to change their settings to control the safe search option? Can I enable safesearch inline through the PA? Looked through a few of the docs available, but it seems it should be a simple rule that enables safesearch without user interaction or being presented a block page.
Hello All.For PANOS 4.1, PA support FQDN as a address object that I know. I wonder FQDN at address object can be supported a pattern of regular expression?Thanks.Roh.
Here is my «little» problem:Background:Extended Unique Identifier (EUI)When the link-local address is automatically generated, the device identifier is derived from the switch's 48- bit (hexadecimal) MAC address to create a 64bit Extended Unique Identifier (EUI) to be appended to the fe80 link-local prefix, as follows: - ff-fe is inserted betwee...
Hello Team.As you know that custom application can be defined on PA device that has various function such as HTTP response, request and so on and I could find good docs from here but could not find any document for function about unknown-req-tcp-payload, unknown-rsp-tcp-payload, unknown-req-udp-payload, unknow-rsp-udp-payload.I want to know how ...
Hello, i am trying to do somehting that hosuld be very simple and straight forward but for some reasons, its not working.My customer has two internet connections : ADSL and IP-SHDSL used as below :ADSL router used for all browsing (from all users ) -copnnected to ethernet 1/1IP-SHDSL Router used only for Fixed IP services :- Exchange Server and...
Hi all.I’d like to configure and know DNS proxy. Domo customer wants to configure DNS proxy. So I was read a PA 4.0 administration guide but I can’t understand completely. What concept does DNS-proxy has?? is it mapped between internal DNS and external DNS?If I will make a DNS-proxy rule, is it possible to connect internet with internal DNS serv...
I had to reset to factory, now I am prompted for a (PA-HDF Login), I have tried the normal admin/admin but it does not work. Any suggestions?
2011 07 13 06:09:26, PAN_AGENT_GET_NEW_IP: Number of IPs received from device (192.168.255.220): 12011 07 13 06:09:26, QueryIP 192.168.6.2 (_unknown_) done2011 07 13 06:09:26, Sending 1 IP(s) to device (192.168.255.220)2011 07 13 06:09:26, [1] 192.168.6.2 : _unknown_ to device (192.168.255.220)2011 07 13 06:09:46, User enumeration error for 19...
PavelK
on:
Commit Failed
BPry
on:
SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
