General Topics

Using local user database in security rules.

Dear all,

Can a user defined in the local user database to be used on security policies?

What we need to deploy is that when a user authenticates via SSL VPN (using the local user database) to be able to apply security policies based on this specific u

...

Resolved! SSL VPN, clientless possible?

Is it possible to deploy the SSL tunnel mode of VPN without a client installation, or without administrator rights for the initial installation?

Thanks,

Kirk.

How to delete PDF reports

Hello Support.

Can I delete PDF reports in a PA device without FACTORY RESET?

I couldn't delete them by "request system private-data-reset".

Regards,

Tomoyuki Komrue

Multiple SSL VPN tunnels to same endpoint - possible?

Hi.

I run a pair of PA 2050's on my internet edge, and currently use them for terminating an SSL VPN for staff to remote access internal resources.

I want to put in a second SSL VPN, different IP range, different security zone, much more restricted for

...

Which ports are being used by MGT port?

Dear Master.

I want to know that TCP and UDP ports for MGT ports that access PA from external network through other FW.

Thanks

Regards.

Roh.

PA500 Connected driectly to MAN

I am just installing a metro Ethernet internet connection and was wondering if anyone has connected the carrier termination device directly to a PA500 and used this as the router? Can anyone think why this wont work?

Resolved! No RST connection

Hi, my scenario is: one Security Rule that allow one IP of inside (10.10.10.1) to outside with ftp application. I've captured traffic and I see that the three way handshake begins but when Palo Alto detects that the traffic is not ftp, it doesn't se

...

Feature Request - Change the content updated email

Hello,

I would like to make a feature request to change the content updated email. What's in there is good, but with the impact that App-ID can bring to internet access, I think PA should add something like change control infomation in the email.

When

...

Brightcloud - Just upgraded to 3.1.6 and...

I'm seeing this in the System Logs every 10 minutes or so: "Connected to Brightcloud update server service.brightcloud.com".

Any ideas why please?

Resolved! Config commit is taking nearly 10 minutes with 3.1.1

Previously, using the 3.0.x series the commit where really fast, it sometimes took less than a minute.

Now, every config commit is taking nearly 10 minutes :

08:40:02 17 Commit FIN OK 08:49:36

Is there anything that could

...

IPSec VPNs for mobile users

Hello,

is there a guide to setup IPSec VPNs for mobile users?

Thanks

SSLVPN Checklist for Mac OS X

Would like to install SSLVPN client on MacBook Pro's. Would like to create installation checklist to make to list how to install and howto use VPN client after installation. I installed on one Mac already but did not see a shortcut or NetConnect ic

...

Resolved! AV version 349

The Release Notes for AV version 349 are empty - no new viruses and no new old viruses. At 66MB is should be a large update. Is version 349 suspect, or are we ok to install it? Thanks --

Resolved! Changing the URL for whois lookups

Hallo! I'm trying to figure out the format of ip-address-lookup-url which defaults to http://www.networksolutions.com/whois/results.jsp?ip= The Network Solutions site is not that useful for addresses allocated to RIPE, APNIC etc so I tried to speci

...

Is ther an OSPF issue in PAN-OS 3.1.5

Hello,

We were doing some tests on ospf, and we noticed that the firewall dont flush his ospf adjacency table even if a nheibour goes down, and this for a duration of one hour, in wich it continue to include the wrong information (concerning the gone

...

Discussions