General Topics

FTP Brute Force Attempt vulnerability protection

I enabled "FTP Brute Force Attempt" (ID 40001) vulnerability protection, but my FTP server logs are still filling up with unsuccessful brute force login attempts. I've tried "drop", "drop-all-packets", and "reset-both" but it doesn't seem to make any

how do I get a pcap of threat on PANOS 3.0.x?

Dear manager.

I trid to find command on PA using panos 3.0.8 for packet capture of threat but could not. and I couldn't find any information in this community.

I wonder that threat pcap is being used only PANOS 3.1.x? or having a different command?

Than

BGP authentication

I have an RFP with a requirement for BGP support RFC2385 MD5 signatures within BGPv4.

Can PAN-OS 3.1.2 do this?

server load balancing on PA-4020?

I'm working on a Data Center redesign.  One design we are considering will require replacing a core switch which currently gives us the ability to load balance a few sets of systems (within a set, not across) by defining an outwardly facing IP that b

Windows EXE Data filter

Howdy,

Quick question:  Does anyone know how to filter on just Windows Executable (EXE) in the data filtering log?  Thanks in advance!

Ebowd

PDF Summary Schedule

Hello,

Could you provide details on how the Summary Schedule works.  The reports work properly and email properly.  They are sent at 4:00AM - and there seems to be no ability to modify that.  Also I am unclear what time frame I am seeing in the report

Threat Content version 192 - Not available?

Received notice that 192 was released yesterday - but it is not available for download on the device or on support site.  Was it pulled back? Thanks.

Mike

Missing Objects defined with Panorama in NAT Policy on device

Hello,

I miss objects, which are defined with Panorama in NAT Policy configuration on the device.

The Objects itself are there (marked green) and available in Security Policy but not in NAT Policy configuraton.

Is there a way to get this working or do I

APP vs URL

Despite the fact that I've blocked *.logmein.com and the logmein application, I'm still seeing traffic permitted to logmein.com. On inspecting the traffic log details, I can see that the traffic is being identified in 2 ways:

06/21 13:07:59  THREAT  u

Allowing a subnet complete internet access but logging their traffic

Hi ya'll,

Background:  We have a seperate Vlan that we call "Raw Internet" with no filtering.  This is used by our helpdesk staff.  Which means they have open access to Internet and nothing is being blocked.

Currently we purchased Palo Alto and I was w