Define the range of ports used when overriding an URL

Hello world,

has anybody come accross a solution, when the PA is "overriding" an URL, it uses a technique of changing the dest port of the original request.

As I'm using a proxy infront of the PA, he clains that the port this request uses now, is not o

PAN-OS Syslog messages

Hello,

We are planning to implement monitoring tools, based on syslog messages sent by the PAN firewall. The pupose is to trap some specefic messages from witch incidents will be generated in the monitoring tool. Is there any documentation that mentio

multiple Palo Alto Agent deployments

Hello

We are having some complaints with the deployment of multiple Palo Alto Agents.

We have 3 remote sites in 1 DOMAIN which are connected with a slow vpn connection. Each remote site has his own Domain controller

Since we have a slow connection ,we

Retrieve dynamic routes using rest api

Hi,

I'd like to be able to retrieve dynamic route entries (such as RIP) that can be seen using the cli with the command: show routing route .

Is it possible?

Thanks,

Andrei

Problems with SMTP after latest Vuln Profile update?

Anyone else seeing a bunch of their SMTP connections blocked by this signature after the latest update?

Establish SSLVPN on login?

Is there a way to automatically establish the SSLVPN on a user login?   It needs to be as seamless as possible;  users may be unable (or unwillig) to log into the SSLVPN, yet I need to ensure that the vpn tunnel is established.

Captive Portal SSL Certificate?

Does anyone have a recommendation on where we can get an SSL certificate that works with the Captive Portal and will be fully trusted by the most commonly used browsers.  Or.. perhaps some guidance on how this situation is best tackled...  Our situat

users identified by NTLM are not automatically overwritten

Hello,

please check the attached document.

It seems like users identified by NTLM are not automatically overwritten as soon as another domain users logs into the system ??

Is this a bug ? It's working fine for multiple AD users who are working on the sa

Gratuitous / Proxy ARP in Failover

Hi,

I know that PA sends out an Gratuitous ARP in Failobver to inform the network partners that the active IF-IP has changed. But waht about the configured static NATs on the Public Network which redirects traffic to internal Servers (e.g. DMZ) ?

Are t

URL filtering

hi all,

I am trying to configure Palo alto's URL filtering for allowing user to access web site like mappy. Problem is mappy make request to other web site for displaying photos and others ....

Do you know if it's possible to create a rule using a crit