Allowing a subnet complete internet access but logging their traffic

Hi ya'll,

Background:  We have a seperate Vlan that we call "Raw Internet" with no filtering.  This is used by our helpdesk staff.  Which means they have open access to Internet and nothing is being blocked.

Currently we purchased Palo Alto and I was w

VLAN and Routing

Hi Guys,

I have an issue.

I have a PAN-500, I am using 3 interfaces: et1/4 is L3-Untrust, et1/3 is L3-Trust and et1/2 is L3-Trust.

ET1/4 has the public IP.

ET1/3 = 192.168.0.254/22

ET1/2 has 8 sub interfaces, each subinterface has its own IP addressing an

Packet Capture Question

Hey folks,

I'd like capture a particular traffic stream for analysis.  I see how you can capure a packet trace as part of a Vulnerability Protection profile, but this particular traffic is not seen as a vulnerability or threat (i.e. it's not showing u

User Activity Report

Hey folks,

Just installed my first PAN firewall - after running an eval unit for about a month.  Loving it so far, but still learning...

First question for this board - hope it's not a dumb one.

We're running 3.0.9 and pan-agent and that seems to be wor

QoS Question - per session or aggregate?

I am applying an application filter to a QoS class, and then limiting the maximum egress bandwidth to that class.  The idea here is to prevent streaming media from consuming excessive bandwidth.

My question is, is this maximum egress bandwidth an aggr

QoS in TAP configuration

Hi All,

Is it possible to use QoS and Realtime bandwidth monitoring capabilities, while in a TAP only configuration?

Cheers,

     SteveR

Lost Newbie - TAP Interface

We bought a PA-500 just to start kicking the tires. I was ready to see a Juniper style GUI but was quickly lost in the PA Interface. Here is what I am looking to do, maybe someone can give me a quick list of configuration steps.

All we want to do is t

VeriSign VIP Authentication Service

Does PAN OS 3.1.2 support VeriSign's VIP Authentication Service for the SSL VPN connection? We are looking at setting up two-factor authentication for our VPN clients.

http://www.verisign.com/authentication/two-factor-authentication/vip-authentication

Communication Problem between Lan and DMZ

Hi,

We have PAN 500 device with us..deployed in L3 mode.Lan and DMZ communication is happening only if i have NAT rule in place with the destination zone and interface mentioned (but no natting be done)between them.Do we really require a NAT rule in

Missing data in TRAFFIC logs

Hi

PANOS ver: 3.0.5

Device: PA-2020

Exported traffic logs contains information about which protocol is used, however if the protocol is ICMP the type and code is not displayed. I a specific case im looking at right now both application and protocol is i

Missing fields in URL log

Hi

PANOS ver: 3.0.5

Device: PA-2020

Did some exports of the sublogtype: URL and got the following columns/fields:

Domain,Receive Time,Serial #,Type,Threat/Content Type,Config Version,Generate Time,Source address,Destination address,NAT Source IP,NAT Dest