General Topics

Resolved! Filtering On Multiple Brightcloud Categories

I have come across a site that has been assigned three categories by Brightcloud. They are Streaming Media, Adult and Pornography, and Internet Communications, in that order. In our setup we allow Streaming Media and Internet Communications but block Adult and Pornography. It would appear that Palo Alto only looks at the first category in the Br...

Looking for options to control access to web site.

I've read the authentication doc, but have not found a suitable solution for limiting access to a single hosted site via the PA. Is there something I am overlooking?What I'd like to do: Host a test site, but only offer access to users we hand pick. It would be fine if we had to provide credentials of some sort to these users, but we do not wa...

Resolved! Application or Service Port

Hoping someone can help me out here:I have a system that needs to ssh/sftp/http/https.I attempt to define using applications: ssh/ssl but cannot find any for http or sftp. If I search the applipedia for the port, it shows other apps that are on port 80 or 22, however, they are not listed as http or sftp.*EDIT: found app for 80 is listed as web-b...

frequently HA connection down

Hi,we have 2 PA-500 configured in active-passive mode.Since two week ago we frequntly receive na alarm about the Ha connections that goes down and then goes up.We have checked and changed the crossover cable used for the Ha interface; we have increased the parameteres for the HA checks...but the PA continue to register event like :SYSTEM ALERT :...

Resolved! Drive-By Protection?

We're finding that there's a small amount of drive-by stuff, typically fake AV, that's making it past the content filtering, spyware filtering, and antivirus filtering in our Pan running 3.1.8.Are there any non-default settings that are recommended as, tbh, the antivirus/anti-spyware feature hardly ever seems to catch anything?Also I believe the...

Resolved! UI Functionality - Simultaneous Edits

When you are editing your policies you can select multiple rows and use the functions at the bottom. However, in my experience, if you click on a setting, such as profiles, it lets you edit just the one attribute even though you have several rows selected. We would like the ability to select rows and make modifications to all of them at the s...

URL Filtering Activation

Hi,URL Filtering Activation.I have activated the URL Filtering Lic, but still when I click on Objects > URL Filteringit shows me " License required for URL Filtering to function "Also when I go into devices, and Licensing, i see the following.Date IssuedNovember 04, 2010 Date ExpiresNovember 04, 2011 DescriptionBrightCloud URL Filtering Activ...

Resolved! Captive Portal Ports in PANOS 4.0

Hello everybody,When enabling Captive Portal either in vWire or Layer3 mode, the Layer3 interface that is used for redirection and has the "Response Pages" option enabled, is listening to certain ports for Captive portal.Let's say that the configured hostname for redirection and for NTLM host is "palo alto" and is pointing to the IP address 10.0...

Which ports are being used by PAN?

When you for example set an url-category into "continue" the continue response-page is issued through tcp 6079.However there is no need to setup a policy for this traffic since the PAN will handle this on its own.But when I enabled captive portal with ntlm-auth I noticed blocked traffic towards the L3 interface of the PAN at tcp 6080 and 7080.Wh...

Resolved! Client IPSEC VPNs

Hi, Can anyone confirm whether IPSEC VPNs(Client) be integrated with active directory for authentication ?

Resolved! What are the limitations of the antivirus engine with compressed files

How many file compressing levels can the Palo Alto antivirus engine pass trough when analyzing viruses ?Is there a way to change that limitation, for example with CLI commands ?Thank you.

Disabling server sessions on PAN agent ?

Hello,In pan-agent, is it possible to disable server sessions monitoring and to work only on security logs, is there any option in GUI or in configuration file of the pan-agent that can be modified to reach this bheaviour?Regard's

Resolved! SSL Certificates

Hi Guys,Hopeing you can answer a couple of questions I have regarding SSL certificates.1) How does the Palo Alto device itself handle SSL when it is doing interception? Can you set that it would block traffic when for example, an online banking sites certificate has expired, force OCSP, etc.2) How does the Palo Alto maintain its own list of CAs,...

security audit standard for PAN OS

Has anyone developed a PAN-specific security audit standard that can be used for verifying the efficacy of PAN firewalls as a firewall / IPS control? If so, can you share? Thanks

Resolved! Is that possible to verify client certificatie when SSL VPN connects?

I found there is a Client Certificate Profile Option, but I search around seems no Document or Manual description how to use it.Can anyone help?

Discussions

Resolved! Filtering On Multiple Brightcloud Categories