General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Dynamic URL classification, unknown URL's, and PANOS differences

Hello --testing PAN/brightcloud URL filtering on two different PAN boxes -- PA500 and PA2020.both policies have dymanic URL classification enabled.one box running PANOS 3.1.8 and other PANOS 4.0.2sample URL: http://www.bankofkremlin.comonline lookup at http://www.brightcloud.com show URL classifed.PANOS 4.0.2 shows URL classified.PANOS 3.1.8 ...

garretta by L2 Linker
  • 4417 Views
  • 3 replies
  • 0 Likes

FQDN rules and DNS features

Hi all,We started using FQDN rules few days ago. The purpose, once again, is to remove "basic IP rules" and to allow the team in charge of server to move their application without asking to change Firewall rules all the time. So, it works great but we have some limitations. Because the PAN device takes into account the TTL value, it will send DN...

bdaussin by L0 Member
  • 3174 Views
  • 3 replies
  • 0 Likes

Real-time throughput info

Hello,We recently transitioned from a Checkpoint NG to a Palo Alto 4020 and I'm in the process of learning the new interface and management capabilities of the PA. When we were using the Checkpoint NG I frequently used Checkpoint Monitor to view the Top 10 Sessions when our Internet bandwidth was being gobbled up... it had a live line graph tha...

dwoolley by L1 Bithead
  • 13920 Views
  • 7 replies
  • 0 Likes

Can't Create Rule for National Bindery Library App

I work in a University, and recently our library began to use - or try to use - an app called "Able" from http://able.nationalbindery.comWe're behind a PA 2050 running 3.1.5 firmware.The site uses an embedded Java app to communicate with a remote server. From what I can tell, the client initiates a session to dst port 80, then the server respond...

Resolved! Change log quota

Hello,is it possible to change the log quotas for the differt type of log, i.e for threat give more than 16% (see below)?> show system logdb-quotatotal log disk size: 124 GBquotas: traffic: 32%, 39 GB threat: 16%, 19 GB system: 4%, 4 GB config: 4%, 4 GB appstat: 12%, 14 GB trsum: 12%, 14 GB thsum: 4%, 4 GB

Resolved! Blocking Categorys Vs ACC reporting

Question, we are blocking the category online-personal-storage but my ACC report shows that some may have been using it. I see this a lot in the Sharepoint (live.com) and Gmail/Yahoo cloud sites but this 4shared is new. Can you please explain to me if this is blocked why does the report under the Bytes column shows data. Please see the image ...

Routing by source address

Hi at all.Actually I am migrating from a Juniper to a PAN 500, the juniper firewall has some routes based in the source address. The reason for this routes is the following, The HQ has running an ERP (SAP) in 3 servers and the conection from the remote sites to this servers is made trough a MPLS, the other traffic between the HQ and the remote s...

HA interfaces

Hi,On PA-4000 series, is it possible to dedicate interfaces other than HA1 & HA2 to HA, for example fibre ports ? Thanks.David

dramey by Not applicable
  • 2205 Views
  • 1 replies
  • 0 Likes

sslvpn installation not working on Windows 7

Hi,I have some clients having issues installing the sslvpn client on windows 7 pcs.We are using version 1.2.0.When i try to install manually, i get the error installing service.I get the netconnect icon but the connection stays on connecting.....Please advise.Vinesh

vinesh by L2 Linker
  • 2488 Views
  • 1 replies
  • 0 Likes

Streaming Media –Best Practice?

We implemented PAN few months ago in our network. We implanted some URL category policy; blocking A&P, online games, gambling and few other URL categories.We are thinking of blocking URL category and Application Category for Streaming media. We use You-tube in our organization for training purpose and we would like to keep some audio/video s...

judy_ulm by Not applicable
  • 4666 Views
  • 4 replies
  • 1 Likes

Port Forward and system real time dump

HelloI'm a novice and I have maybe stupid two questions.How can I dump and display (real time) incoming and outgoing traffic on the interface (or all interfaces) ?.For example: typical view from tcpdump.~# tcpdump -n host 193.165.XXX.XXX and port 80tcpdump: verbose output suppressed, use -v or -vv for full protocol decodelistening on eth0, link-...

u6804 by Not applicable
  • 2790 Views
  • 2 replies
  • 0 Likes
  • 24397 Posts
  • 123 Subscriptions
Top Solution Authors
Labels