Configuration of authentication profile via LDAP

Hi to all,

we have a PA500 release 3.1.4.

We configure an LDAP server that comunicate with a Windows 2003 DC then we create an authentication profile that use that LDAP server; finally we create a vpn profile that use that authentication profile.

VPN us

Group Updates

We have just moved a new PAN2020 into production and are slowing starting to move users over to the new system.   We are running the following:  PAN2020 v3.14 using the LDAP Agent v3.12.

The firewall is not updating Group changes.  I have the update s

Connectivity Issues

We are having an odd connectivity issue that randomly shows up on some of our machines.  They pull an IP # from the DHCP server, they are able to do nslookups, but when I run a traceroute they time out after the L3 Trust port (10.2.0.1).  If you let

BrightCloud Web Reputation Service

Any thoughts on adding this URL Filter feature to the Palo Alto?

It would be nice to have start blocking websites based on their overall reputation.

Odd SSL-VPN Lock Ups

We are noticing that our SSL-VPN connection, whether using the Windows or Mac client, will just lock up for five minutes at a time. The status window shows that no packets are moving at all. Has anyone else had this problem?

We are running PAN OS 3.1.

NSS Labs report

Hello guys,

I was reading the recent NSS Labs Report and noticed at page 5 the following:

'security effectiveness was excellent. Using the default policy, the PA blocked 56,6% of attacks. After rapid tuning that consisted of changing just three setting

IPsec VPN

The customer currently has 4 internet links (3 DSL & 1 leased line). They have an office in Site B and they require VPN connectivity between the 2 locations. The simple requirement is that the VPN has to be established and all 4 internet links have t

Memory Utilization on PA-500

Is it normal for a PA-500 to have memory utilization in the 95 percentile?

Just recently unboxed a unit and after all the applicable updates, available memory seems to be around 15 - 20 megs (out of 1000).

Security Certificate Error

We've had a few instances where we are on websites, the one I have witnessed is simply cnn.com, and then while I am browsing I'll suddenly get a certificate error well after the page is loaded that is generated by the PA-500 unit.  I did not see this

ScreenOS to PAN VPN?

Tomorrow I intend to try and get a Juniper SSG talking to our PAN so I can have a VPN tunnel between two sites.

The PAN is already configured using the defaults in the example PDFs on the knowledge base.

Does anyone know if there are any specifics that