This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

File blocking not working with Hotmail

I've tried to use the file blocking option to ban attachments on Hotmail. But it's not working on me.1. Created file blocking profile for hotmail application, certain file types and chose both directions -> block.2. Created security rule with my IP as a source and hotmail, ssl, web-browsing in applications (added these after the warning on co...

Memory error on PA-500

I've just noticed this error in system logs: DP DDR0 ECC single 69, double 37, dimm 0, rank 1, bank 3, row 0x1434 column 0x300 andDP DDR0 ECC single 65, double 32, dimm 0, rank 1, bank 7, row 0xa5f column 0xf60 Is this memory error and what should I do to resolve this?

PAN Agent internal, Management interface external

I run a PA-2020 situated in a data centre.It is the core router and Internet gateway for a very distributed network, mostly Interent VPNs to the PAN itself.There are a couple of servers co-located with the PAN, connected to its inside interface.Due to the architecture of the network, I have elected to put the management network on a public IP an...

challenge by • Not applicable
  • 2664 Views
  • 1 replies
  • 0 Likes

Unused Objects

Hi All,Does anyone knows how to weed out the unused objects in the Policies ? e.g I have quite a number of custom objects like services but not all are being used in any policies and I want to clean them up from the Objects so as to be organised.Any advice would be appreciated.ThanksBen

mmxong by • Not applicable
  • 3163 Views
  • 1 replies
  • 0 Likes

PAN losing default route in OSPF

Has anyone else had any issues with the PAN losing the advertised OSPF default route in an NSSA. It seems pretty random as it works fine for a couple days and then after a unrelated re-boot its gone. We are running 4.0.2 code on a pair of 4050s.Thanks,

Resolved! Havij SQL Injection Filter

There doesn't seem to be a filter for this vulnerability at this time so I am trying to write one. By default the program uses its name in the agent string;Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) HavijI am trying to create a vulnerability filter that looks for "Havij" in the agent string, my belief based on w...

rodrigum by • Not applicable
  • 11246 Views
  • 5 replies
  • 0 Likes

App, Category, Subcategory and Technology description

Hello,I'm looking for a pdf or other electronical document document where the application are described and also where Subcategory definition is described.For exemple I'd like to know what are the proprieties of application like remote-access subcategory ? there is a description of what is remote -access sub category ?Thank's in advance ..

couple of questions of regard to disk.

Hello All.I’d like to know few things with respect to disk. 1. is it available to change Max disk size on PAN device?In case of max disk size of PAN2050 is only allocated about45GB by default, even though total size of disk is about 160G. So, I’d like to change default max size, if it possible. 2. Let me know default Max disk size of every each...

willstech by • L3 Networker
  • 4213 Views
  • 5 replies
  • 0 Likes

User Agent and Active Directory 2008

I would like to know if there are some known issues about communications between useragent and AD2008 ?We are migrating from AD2003 to AD2008 and some User-ID associations are missed :smileyangry:We are not using security logs at the moment but only the session table monitoring.We already have opened a case but I would like to share this experi...

bdaussin by • L0 Member
  • 4872 Views
  • 5 replies
  • 0 Likes

IPv6 strange behavior

Hello,We are running a PA-500 with version 4.0.2 and I noticed something strange today when adding a IPv6 address to a L3 subinterface.This L3 subinterface already got a IPv4 address.After doing the commit and when it almost finishes around 98% all connections to the network and all traffic going through the PA is dropped for some seconds. I thi...

DNS queries - custom signatures

Hi all,does anyone know how can I identify (if possible) DNS queries from client toward particular web sites. The aim is to see and eventually block some DNS queries that try to resolve forbidden sites. I can't use URL filtering license.Thanks

PAN as a monitoring device vs NetFlow

Hi, we have a customer that needs to have more visibility about the traffic in their network (applications, ports, bandwidth, vulnerabilities and virus) and will like to use PAN instead of activating NetFlow at the switch level.This will imply that each access switch in each floor will have a span port that will mirror traffic to a tap port in P...

SSL VPN - Client sees no gateway?

Excuse what is probably a very novice problem.I've gone through the guide on setting up a SSL VPN (1.3.0) on PAN 4 for our new PA-500, and I can successfully log into the NetConnect client and receive an IP from the VPN pool, etc. However, I cannot ping or otherwise reach any internal systems. When I run traceroute to an internal system, it time...

emccrea by • L1 Bithead
  • 12524 Views
  • 11 replies
  • 0 Likes

MacDefender Signature

Has anyone seen a lot of activity around the MacDefender Command and Control Traffic (event ID 13104 and 13108) spyware threat since the introduction of these signatures? I believe first add of these signatures was 248-993 and then updated in 249-1005. I am trying to get a handle on the numerous daily "blocked" events we are seeing for these c...

MGoodnow by • L4 Transporter
  • 2392 Views
  • 1 replies
  • 0 Likes

Upgrading SSL VPN client - is it automatic?

Hi.I've noticed that the SSL VPN client 1.3.0 has been released.Currently, I have 1.2.0 active on my PA's.If I activate the 1.3.0 release, what impact will this have on the clients? Will the upgrade be seamless and automatic, or will it require interevention (especially in the case of 64 bit Windows clients).Anyone done this and can shed some li...

dagibbs by • L4 Transporter
  • 4354 Views
  • 4 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks