SSL-VPN with Ldap

I´m trying to configure ssl-vpn to authenticate users in ldap server or locally with imported users from Ldap via PAN. The only way that I’ve successful login´s is when I create a local user in Palo Alto firewall. I´ve got connection to Ldap servers,

license-expired

Our PA2020 has started to categorize all visited URLs as <license-expired>. Nevertheless, our URL Filter License is not expired. I configured the PA2020 to block all URLs when license is expired ... and now that´s what our PA2020 actually does: all U

PAN OS 3.0.8 to 3.1.1 upgrade and backup file question.

Hi All,

I have question regarding PAN OS. Existing i am using PAN OS 3.0.8 and PAN Agent 3.0.2..

I want to upgrade to PAN OS 3.1.1 version and the model is PA-500.

1. Can i use back my existing configuration from 3.0.8 firmware to load on the new firmwa

Security Policy for Anti-virus blocks or allows all

Hello,

I've watched the video on how to setup a URL filter security policy. It shows the action selected to be allow. When I created an Anti-virus Profile I set it up to block anything on http.

I then went and created the Security policy selecting that

Network Interface Setup

I have a rather unique issue in that one of our internal networks is still on a public set of ips.  I can't switch it over at the present time, but I am having a problem figuring out how to get the PAN to work for me on this network.

My current setup

PAN Application Object Request (global)

Does PAN have a method for requesting a new global application object? Not for specialized "in-house" applications - but for large universally used applications.  Particularly I am looking for Commvault and BigFix as an application.  If there is no f

PAN AGENT FLAPS

Hi,

The user to ip mapping in the pan agent flaps frequently.It gets established and disconnects frequently.Any specific reason for this? There is no firewall installed in agent.

Cannot access web console of PA under Windows server OS

Hi All,

I found that Windows 2000 and 2003 Internet Explorer cannot access PA web management console but ping and ssh are fine. Please advise. Thanks!

Regards,

Johnny

blocking parent domain n allowing child domain in URL

hi,i have specific url filter requirement,the parent domain should be blocked,but child domain should be allowed for specific users.For ex: www.apple.com should be blocked for specified users but www.apple.com/iphone should be allowed for another gro