Hi:What is the order of operation for traffic flowing through the box?For example, here's a list for CheckPoint (although it's incorrect):http://www.cpug.org/forums/miscellaneous/471-order-firewall-1-operations.htmlThanks!
Hello,Is there a way I could print our Objects - Security Profiles - URL Filtering - profiles? We have 10 so far and I expect this to grow again this year. I would like to print them so our Administration Office can compare and evauate each profile for the new scahool year.FNichelson
HI,my question is very simple.In the examples always shown the way to deny URL categories.I have to allow on usergroup the URL categories webmail.What is the way to realize this.Thank you nebtir
Our network has 10 Windows child domains. We have a UIA installed on 2 Domain Controllers (mix of 2003/2008 Windows Servers) in each child domain. On about 8 of our 20 UIAs we have had the UIA process stop unexpectedly or not start up automatically after a server reboot. Event logs are not pointing to the issue. We are using port 55555 for t...
Greetings,So, I'm looking to use ACS as a means for authentication for accessing our single PA device. I found this doc (https://live.paloaltonetworks.com/docs/DOC-1472) which has the configuration as well as the dictionary file. I guess I just have a few questions:1. Do I need to create it with all those groups? As in, are those groups only...
Hi,We have a rule to allow ICMP between the DMZ server to an Internal Server and vice versa. When I added another Internal server to the rule, I saved, and I committed the change. Afterwards, it was still not working; I still cannot ping to my server. When I checked on the logs, everything showed OK, except under Application, it shows 'incomplet...
I thought I'd ask this here as I feel like it may show up again sometime if someone has an answer. We're deploying Palo Alto behind a pair of Cisco ASAs and there's a minor issue. It looks like (through packet capture on the Palo Altos) SCPS traffic is being dropped between the ASAs on their inside interfaces. The ASAs report an error about e...
Does anyone know if the system logs previous NAT translations? I have the public IP of one of our users who may have committed a copyright violation and need to trace to the private IP. Also, is there any way to set the duration of NAT translations?Thanks in advance!
I exported some events to Excel and all of the events either have 0x0 or 0x8000 as a value in the flags column. If I look at the pcap for one of these events in WireShark I see different flags. What flags are being referenced in this column?
Hi all, This probably has a real simple answer but it has got me stumped. How do I do wild card searches in 4.x PAN Traffic logs ? For example, I want to find all traffic from a Class C subnet 192.168.1.x. Using a * does not seem to work ( ( addr.src in 192.168.1.* ) ) and throws a syntax error.Cheers,
Greetings,This is my first post on KnowledgePoint, so apologies for any breaches of etiquetteRelevant info:Panorama version 3.1.7Attempting to use the API to run a report per this article: https://live.paloaltonetworks.com/docs/DOC-1031I have generated my key with my account used to access Panorama. It is a AD account (not local to Panorama). ...
I've setup ipv6 routing on a PA-2050 (software 4.0.4). When I do a traceroute from a client I always see the link-local address off the PA instead of the unicast adress. Does anyone know how to change this? 2 2 ms 1 ms 1 ms 2001:6a8:2500:10::1 3 <1 ms <1 ms <1 ms fe80::21b:17ff:fe00:3f13 <----- ???? 4 1 ms ...
Hi,I am using Splunk as a tool to collect and correlate logs coming from my PAN, i am trynig to configure splunkforPaloAlto Application under Splunk but i don't see the 4 types of log files (Threat, traffic, System and configuration), i'am seeing only the traffic log, i am following the configuration guide to configure this application but i can...
I'd like to keep a trace of CPU usage of our PaloAlto P500 using SNMP?What's the OID for CPU usage as it shows up in the dashboard?Thanks in advance,Emmanuel
Does using a Trusted CA from GoDaddy work with SSL Decrypt? Right now when I enable the SSL Decrypt for any catagory it flat blocks them with nothing more than a Cannot display page. I tried to decrypt gmail as a test but it just blocked it even though users are allowed to get there. When I go to http://www.facebook.com I get the app denied page...
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
TomYoung
on:
FWs no longer forwarding logs to Panorama
| User | Likes Count |
|---|---|
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
