General Topics

PAN-OS 4.0 error message

HelloYesterday I've upgraded a PA-2050 from 3.1.7 to 4.0.0.Now I can't commit the config.This error message pops up :OperationCommitStatusFailedDetailsshared -> ssl-decrypt is a duplicate nodeFrankly I'm a noob in panOS administration.I feel it is a certificate problem and despite I've found ssl-decrypt word in the xml configuration file, I ...

Threat log not showing viruses

Hello,We have PA-2050 with software version 3.1.6 I have made antivirus profile to block all detected viruses and also I have made custom pages to alert users downloading virus. When i test it with downloading known virus i get block page and PA is blocking virus download. Now when i go back to threat log i cannot find any log event of the virus...

PA-2050 IPSec NAS with FreeRadius

Hi community,is it possible to use a PA-2050 as IPSec-NAS with FreeRadius ?Background:all remote users and networks are stored at a radius database.Is PANOS able to use this information for running a complte IPSec-Setup ?I think it is not useful to add hunderts of these configuration directly at the PANOS-Device...RegardsChristian

Does anyone have experience - good or bad - with long haul SFP modules?

Does anyone have any experience with long haul SFP modules? We are looking to plug one in and were wondering if anyone has had any success (or failures)Thanks everyone,Dave

Exporting A Custom Report To PDF

Hi,When I run a custom report that I have created, the output of the report in the Web UI will show the source and destination IP addresses as well as the hostsnames for each. However, when I export the report to either PDF or CSV, the hostname is not exported. Instead, the hostname field contains the IP address. Is there a known way to corre...

Resolved! IPv6 Routing Capabilities

Hi ;I think for now we can't route any IPv6 traffic on palo alto firewalls.I am curious if there are going to be some implementations about IPv6 routing algorithms/protocols on Palo Alto firewalls soon or not?Can someone give some information about that topic?Thank You...

User-ID - Lotus Domino v6.5.2

Hi All,Hoping you can help, is it possible for the User-ID_LDAP Agent to communicate and get IP Mapping from a Lotus Domino directory server ?CheersMarc

Resolved! Panorama 4.0.1

Hello,Does anyone know if Panorama 4.0.1 is able to manage pan 3.1.7 devices? We are thinking of upgrading Panorama first, and the device a few weeks after.Let me knowThanksPaul

Issues with Groups in Authentication Profile

I am have an issue with the allow list on the Authentication Profile. Up until yesterday I had an AD group name which pointer to the highest level of our tree and SSL-VPN users were not able to login, the message they got was "Invalid UserID and/or Password" I changed the allow list to "all" and now everything works, but I would like to know w...

admin auth failed

Hi Support team,I tried to authenticate admin with RADIUS, but failed.The following message appeared in System logs:- User 'komure' failed authentication. Reason: User is not in allowlistWhat does it mean?device : PA-500PANOS : 3.1.0Regards,Tomoyuki Komure

Resolved! Upgrade Process Using Panorama

I have read all the upgrade documentation for PanOS 4.0.1 and its seems very clear on how to upgrade the units themselves. What I have not found is supported process for upgrading an environment that uses Panorama. We have Panorama and MANY 4000 series PA's running 3.1.5 code today. What would be the supported process/order for ugrading Panorama...

App-ID: Amazon video on demand - any plans?

Hi all...anyone know if there are plans to add detection of Amazon's new Video on Demand service that they are offering to their Premier customers? Hasn't been an issue yet, but Amazon has plans to turn this into a Netflix competitor, so it'll be an issue soon enough.More info here:http://www.amazon.com/Instant-Video/b?ie=UTF8&node=16261631...

User Identification Agent

I have forget to start/restart service, before configure so I have this message : "Please start the PanAgent service first" in status agent.When I click on "start", this message display: Impossible de démarrer le service PanAgent Service sur Ordinateur local. Erreur 1069: l'échec d'une ouverture de session a empêché le démarrage du service ...

Panorama - committing changes to Firewall

Hi all,I might have a little understanding problem here. Is the commit process from within Panorama a two step process ?1.) In Panorama Policies tab, go to Security Policy.Choose correct device group, modify security policy as required and click on commit when done.This does not install the committed Policy to the Firewall yet.2.) In Panorama se...

Resolved! replace proxy ISA server with PA500?

Can I replace MS ISA server with PA500 like proxy, is that recommended and what is the benefit of kind implementation?

Discussions

PAN-OS 4.0 error message

Threat log not showing viruses

PA-2050 IPSec NAS with FreeRadius

Does anyone have experience - good or bad - with long haul SFP modules?