General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Auto-block admin "hammer" attempts?

I've been seeing stuff in the system log like the following:

User 'caitlen' failed authentication. Reason: Authentication profile not found for the user From: [some hacker in China's IP].

There are a huge string of these, obviously it's reading throug

...

Add second Internet coonection

Does anyone have any notes or tips on adding a second Internet connections? Also need to point specific group of uses to new connection, do I create a second Untrust zone, different name then first Untrust zone and change the security rule for those

...

Resolved! Recommended software releases?

Hi All,

I looked around, and I was wondering if Palo Alto has a similar "recommended software" as other vendors do where depending on the hardware there is a specific version of software, or is everyone just updating their firewalls as the new PanOS v

...

PanOS 4.0

Its disappeared off of the site along with the version 4 terminal services agent. Anyone know why? I've been waiting for the 2008 64 bit agent for a while.

Invalid address value 'NaN' on 3.1.7

Hi,

I have 2 PA4020 on 3.1.7 and when committing, i get the error device: Invalid address value 'NaN'", but the commit is successful.

Please advise.

Thanks

path-monitoring packet interval

Hi,

Can I change the path-monitoring packet (ping) interval?

Our ISP don't agree their router receive ping packet every 200ms.

I would like to change ping interval.

Thanks.

Resolved! User ID agent on Vista/Win7

Is there a timeline available for when the User ID agent will work on Windows 7? I need to plan a rollout of new PC's early next year, and I need to know if they are going to need downgrades to XP for any length of time. I know that the captive por

...

Define the range of ports used when overriding an URL

Hello world,

has anybody come accross a solution, when the PA is "overriding" an URL, it uses a technique of changing the dest port of the original request.

As I'm using a proxy infront of the PA, he clains that the port this request uses now, is not o

...

PAN-OS Syslog messages

Hello,

We are planning to implement monitoring tools, based on syslog messages sent by the PAN firewall. The pupose is to trap some specefic messages from witch incidents will be generated in the monitoring tool. Is there any documentation that mentio

...

multiple Palo Alto Agent deployments

Hello

We are having some complaints with the deployment of multiple Palo Alto Agents.

We have 3 remote sites in 1 DOMAIN which are connected with a slow vpn connection. Each remote site has his own Domain controller

Since we have a slow connection ,we

...

Resolved! Application Group vs Filter

What is the distinction between an application group and a filter? What is the best practice for each?

Thanks,

Todd

Resolved! How do I stop low level file blocking (threat) alerts being sent via email?

Email alerting in Log Settings->System is set to high and critical only, Does anyone know why we receive low level email threat alerts from the file blocking security profile? We detect and alert on all file types - however, we do not necessarily wi

...

Retrieve dynamic routes using rest api

Hi,

I'd like to be able to retrieve dynamic route entries (such as RIP) that can be seen using the cli with the command: show routing route .

Is it possible?

Thanks,

Andrei

Resolved! URL Filtering is Case Sensitive in 3.1.7

Having been very badly bitten by this, is any documentation from Palo Alto going to be coming out detailing exactly how this feature is being implemented please?

Problems with SMTP after latest Vuln Profile update?

Anyone else seeing a bunch of their SMTP connections blocked by this signature after the latest update?

Name:SMTP EHLO/HELO overlong argument anomalyID:30384Description:This anomaly would be triggered when an overlong parameter is sent to the HELOcomm...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free