Hi,Can I change the path-monitoring packet (ping) interval?Our ISP don't agree their router receive ping packet every 200ms.I would like to change ping interval.Thanks.
Is there a timeline available for when the User ID agent will work on Windows 7? I need to plan a rollout of new PC's early next year, and I need to know if they are going to need downgrades to XP for any length of time. I know that the captive portal should still work, but not having to authenticate was a big plus in getting buy in for the ne...
Hello world,has anybody come accross a solution, when the PA is "overriding" an URL, it uses a technique of changing the dest port of the original request.As I'm using a proxy infront of the PA, he clains that the port this request uses now, is not one of the allowed ones.squid -> tcp_deniedNo problem of changing this port into the secure por...
Hello,We are planning to implement monitoring tools, based on syslog messages sent by the PAN firewall. The pupose is to trap some specefic messages from witch incidents will be generated in the monitoring tool. Is there any documentation that mentions syslog messages sent by the PAN device in case of a système event (If down, HA switch over, HA...
HelloWe are having some complaints with the deployment of multiple Palo Alto Agents.We have 3 remote sites in 1 DOMAIN which are connected with a slow vpn connection. Each remote site has his own Domain controller Since we have a slow connection ,we made the choice to deploy an agent for each site. Each agent is only pointing to the local domain...
What is the distinction between an application group and a filter? What is the best practice for each?Thanks,Todd
Email alerting in Log Settings->System is set to high and critical only, Does anyone know why we receive low level email threat alerts from the file blocking security profile? We detect and alert on all file types - however, we do not necessarily wish to see all file transfers as email alerts. Any suggestions on how to tune this?Thanks!
Hi,I'd like to be able to retrieve dynamic route entries (such as RIP) that can be seen using the cli with the command: show routing route .Is it possible?Thanks,Andrei
Having been very badly bitten by this, is any documentation from Palo Alto going to be coming out detailing exactly how this feature is being implemented please?
Anyone else seeing a bunch of their SMTP connections blocked by this signature after the latest update?Name:SMTP EHLO/HELO overlong argument anomalyID:30384Description:This anomaly would be triggered when an overlong parameter is sent to the HELOcommand of SMTP protocol. Some servers such as Tabs Laboratories MailCarrier2.51 might be prone to an...
Is there a way to automatically establish the SSLVPN on a user login? It needs to be as seamless as possible; users may be unable (or unwillig) to log into the SSLVPN, yet I need to ensure that the vpn tunnel is established.
Does anyone have a recommendation on where we can get an SSL certificate that works with the Captive Portal and will be fully trusted by the most commonly used browsers. Or.. perhaps some guidance on how this situation is best tackled... Our situation is as follows:1) We want a certificate that will not generate an error of any sort when diges...
Hello,please check the attached document.It seems like users identified by NTLM are not automatically overwritten as soon as another domain users logs into the system ??Is this a bug ? It's working fine for multiple AD users who are working on the same system ,but NOT if an "NTLM identified user" logs off and an AD users logs into the system.Tha...
Hi,I know that PA sends out an Gratuitous ARP in Failobver to inform the network partners that the active IF-IP has changed. But waht about the configured static NATs on the Public Network which redirects traffic to internal Servers (e.g. DMZ) ?Are there also Gratuitous ARP send out for those "Proxy Arp" Adresses?I ask this because at a customer...
I have the following configurtionTwo PA 4020 in HAI can connect to Primary Box over web/ssh/ping but not able to do the same.Here is my configuration on secondary box.jksyed@SV-PA-Zulu(passive)# show deviceconfig system serviceservice { disable-http no; disable-https no; disable-telnet yes; disable-ssh no; disable-icmp no; disable-snmp yes...
PavelK
on:
Replacement of RMA
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 6 | |
| 4 | |
| 3 | |
| 3 | |
| 2 |
