General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! SNMP Monitor a VPN Tunnel?

If I point my network monitoring system at our PAN, it sees all the ethernetx/x NICs and the MGMT NIC and a "HA" interface.

Is there a way to add a VPN tunnel (tunnel.1) to the list of interfaces monitored as I'd like to know traffic passed up/down th

...

Resolved! Memory usage issue at no traffic case

I have a PA-2050 running PAN 3.1.4, There is no traffic on the device. Only the management IP was assinged to the device.

But only 44MB free memory is available. Is this expected behaviour?

% CPU 18 %Free Memory 44.0 MBTotal Memory 984.2 MB% Disk U...

Resolved! NAT question

Hello,

I have migrated a configuration from an netscreen firewall.

On the netscreen on the outside interface (against the internet) there are two mip ip's configured,

one of the MIP ip's are on the same subnet as the ip on the main ip. But the other IP

...

NSS Labs report

Hello guys,

I was reading the recent NSS Labs Report and noticed at page 5 the following:

'security effectiveness was excellent. Using the default policy, the PA blocked 56,6% of attacks. After rapid tuning that consisted of changing just three setting

...

The customer currently has 4 internet links (3 DSL & 1 leased line). They have an office in Site B and they require VPN connectivity between the 2 locations. The simple requirement is that the VPN has to be established and all 4 internet links have t

...

Resolved! Active Directory 2008 Supportability

Hello,

New to PANs (PA2020s) and trying to find if the Agents are usable with AD 2008. We are migrating and want to ensure we are not about to break the authentication.

Thanks in advance.

Memory Utilization on PA-500

Is it normal for a PA-500 to have memory utilization in the 95 percentile?

Just recently unboxed a unit and after all the applicable updates, available memory seems to be around 15 - 20 megs (out of 1000).

Security Certificate Error

We've had a few instances where we are on websites, the one I have witnessed is simply cnn.com, and then while I am browsing I'll suddenly get a certificate error well after the page is loaded that is generated by the PA-500 unit. I did not see this

...

ScreenOS to PAN VPN?

Tomorrow I intend to try and get a Juniper SSG talking to our PAN so I can have a VPN tunnel between two sites.

The PAN is already configured using the defaults in the example PDFs on the knowledge base.

Does anyone know if there are any specifics that

...

Resolved! URL Filter Conflict - Which Wins?

I've done some testing but I just want to be 100% sure of this.

Let's say I have a URL Profile that blocks shareware sites.

Let's say I create a custom URL category that contains shareware sites, and on that URL Profile I set my custom category to "all

...

Firefox Download being classified as Trojan-Downloader/Win32.banload.aumr.

The Firefox 3.6.9 downloads from any of the mirros is being classified as Trojan-Downloader/Win32.banload.aumr, threat ID 2549505. Problem on Mozilla's end?

Here's the data from the PCAP:

fox/releases/3.6.9/win32/en-US/

-Type: application/octet-stream

MZ...

Resolved! Speed limit each user ?

Is it possible to ratelimit each user in a usergroup or adressgroup using the QoS feature ?

I want to limit each user to examle 3 mb/s maximum (all kind of traffic)

Regards Stig

Resolved! “Here you have” Virus (aka W32/VBMania@MM)

New virus, described here:

http://www.avertlabs.com/research/blog/index.php/2010/09/09/widespread-reporting-of-here-you-have-virus/

Is this virus recognized by the PAN devices? I'm not sure how to look that up, or I would do so myself.

If not, any thou

...

Resolved! Range of logs stored on PA-4050 appliance

Hi All,

How do I find out the date range of the logs still be stored on an appliance?

If its FIFO Id like to know how far back the current logs on the box go back.

"show system logdb-quota" will tell me what space is being used and by what,

but not when

...

Resolved! Is it possible to modify panorama created rules directly on PAN devices?

Hi,

I noticed that rules pushed on devices from panorama are not editable directly on the device, is ther any way to make it possible, we can imagine a situation in witch panorama is down, and there is an urgent need to modify some rules.

Regrds.

Discussions