General Topics

More granular with Vulnerability Exceptions?

When adding a Vulnerability Exception, is there any way to make the exception more granular? (being able to add the exception along with an IP host or range, source or destination IP, zones, or virtual systems.)  For example, If I wanted to ignore a

Recommended max user per Platform

Hi everybody,

is there an best practice or recommendation for how many users

you should take which platform?

For example:

until 200 user take a PA-500

greater 200 and less than 800 user take a PA-2020

and so on!

Kind regards

Christian

Packet Capture instance within Details of Traffic Log

Hello,

What is the significance of the "green down arrow" packet capture within the "Details" field of the Traffic Log? We have no packet capture defined and it only shows up randomly for certain connections.  Is this an automatic output if there are

Honeynet off of PA

Hello All,

I have just started configuring PAN 4020 for the first time - a newbie - planning to run it as virtual-wire.  However, I was informed that the FW supports hybrid routing - i.e. l2, l3; my question regards a honeynet, that I want to hang off

FTP slow through PA-500

Hi,

We have our PA-500 set up as follows:

Ports 1 & 2 as VWire connected to our firewall with AV and malware scanning

Ports 3 & 4 as L3 for our user traffic, scanning AV and Malware and URL filtering

When a user uses FTP to send files to servers on our D

eDirectory V7.3

Has anyone tried the UserID agent with V7.X?  I know its only supported from 8.8 but has anyone had a go with V7.3?

Ultrasurf blocking

Hi,

  We have PAN 500 with the firmware version of 3.1.2. It faild to identify the new version of ultrasurf (Ultrasurf version 10.02).How to identify and block the Ultrasurf by paloalto.is there any other way to block it. pls help me.

PAN Agent Settings

We are implementing the PAN User ID agent and we were wondering what everyone else was doing.. did you just leave it as the defaults?

Bundle CA cert with Captive Portal cert?

Just bought a cert from Thawte and am trying to make use of it for captive portal redirects.  I've run into an issue in that, while the unit can import the host certificate fine, none of the captive portal client's recognize it as it's been signed by

Multiple WAN interfaces

Currently going through a ISP change.  We have the luxury of having both WAN links up so we don't have to do a hot cut.  I'm trying to figure out how this can be achieved.  The set up needs to route requests back out the interface on which they were