General Topics

UDP Conversations for VOIP

Hi All;

I have an outside VOIP server running H323.  The phones internally use a keep-alive mecahnism over UDP 5000 as a destination and varying source ports. 

The server on the untrust side of the firewall will send the same keep-alives in response.

Convincing Domain Admins to cooperate with PAN User-ID Agent

If the security organization would like to use Palo Alto Networks firewall features for tracking user behavior in a more meaningful way, that alone should be enough to get cooperation from all Domain Admins. PAN User-ID Agent should be given an accou

Difference in URL block categories between panorama and device

I have 2 PA-2050 being managed by panorama, all running 3.1.6.  I am using the brightcloud url filtering service we paid for and both devices are up to date.

When I do a commit all from panorama it shows "commit all succeeded", however when I check th

Hide protocols from display in ACC?

Does anyone know of a way to hide protocols that would normally display in the ACC? Let's say there is an organization that generates a lot of ICMP traffic. This is all known good so they would like the capability to hide it from displaying in the AC

Configure Active Directory on PAN OS 4.0.1

Hello all,

I am a new Palo Alto user and have just booted up and setup my PA2020. I currently am running on virtual wire and so far everything looks fine. I'm trying to link the device with my AD Server using the User ID Agent and I got no errors so f

IPS False Positives

We are constantly seeing false positives like this. The victim is a Windows ActiveDirectory Server. I believe we need to add some sort of intelligence to the IPS in order to reduce these kind of false positives to an minimum.  Would it be possible to

PAN-OS 4.0 error message

Hello

Yesterday I've upgraded a PA-2050 from 3.1.7 to 4.0.0.

Now I can't commit the config.

This error message pops up :

Frankly I'm a noob in panOS administration.

I feel it is a

Threat log not showing viruses

Hello,

We have PA-2050 with software version 3.1.6 I have made antivirus profile to block all detected viruses and also I have made custom pages to alert users downloading virus. When i test it with downloading known virus i get block page and PA is b

PA-2050 IPSec NAS with FreeRadius

Hi community,

is it possible to use a PA-2050 as IPSec-NAS with FreeRadius ?

Background:

all remote users and networks are stored at a radius database.

Is PANOS able to use this information for running a complte IPSec-Setup ?

I think it is not useful to a