Routing issue

Hi guys,

I have an issue I faced before with OpenBSD's PF Firewall but I am not able to solve with PAN.

My topology is:

INET ----- PAN ---- DMZ ---- Balancer ---- Balanced Servers

                 |

              LAN

The domain controllers for the DMZ doma

URL Filtering Categories

Hello,

After some days using a PAN Firewall, I've notice that some URL are incorrectly classified. Is there any way to modify the standar URL categories?

Thanks,

Multiple Virtual Routers sharing the same INSIDE zone? Possible?

Hi.

I have my PA's running fine and dandy with my normal internet link(s) and DMZ farmed out to my edge routers without issue.

Now I have coming a requirement for a dedicated, seperate Internet link and DMZ for a special purpose with the traffic being

3.1.8, when?

Hi,

we opened a Case and the support answered that it will be fixed in 3.1.8 release.

I was wondering, when will it be released?

Any idea?

Thanks

multiple SSL-VPN profiles

I have to manage some different SSL-VPN profiles. I would offer to remote user the possibility to choose a VPN profile and then access the enterprise network with different policies. Is it possible ? How can I distinguish between one profile from ano

Invalid address value NaN shown in 3.1.7

Since updating to PAN 3.1.7 the committing dialogue shows

device: Invalid address value 'NaN'

Nevertheless the rule installs successfull.

Does anybody have the same strange message?

Auto-block admin "hammer" attempts?

I've been seeing stuff in the system log like the following:

There are a huge string of these, obviously it's reading throug

Add second Internet coonection

Does anyone have any notes or tips on adding a second Internet connections? Also need to point specific group of uses to new connection, do I create a second Untrust zone, different name then first Untrust zone and change the security rule for those

PanOS 4.0

Its disappeared off of the site along with the version 4 terminal services agent. Anyone know why? I've been waiting for the 2008 64 bit agent for a while.

Invalid address value 'NaN' on 3.1.7

Hi,

I have 2 PA4020 on 3.1.7 and when committing, i get the error device: Invalid address value 'NaN'", but the commit is successful.

Please advise.

Thanks

path-monitoring packet interval

Hi,

Can I change the path-monitoring packet (ping) interval?

Our ISP don't agree their router receive ping packet every 200ms.

I would like to change ping interval.

Thanks.

Define the range of ports used when overriding an URL

Hello world,

has anybody come accross a solution, when the PA is "overriding" an URL, it uses a technique of changing the dest port of the original request.

As I'm using a proxy infront of the PA, he clains that the port this request uses now, is not o