General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 310 Views
  • 0 replies
  • 0 Likes

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 983 Views
  • 0 replies
  • 0 Likes

Zone Protection Severity Levels

What are the severity levels that get logged to the Threat Log for the Zone Protection Profile Flood Protection, Reconnaissance detection, & Packet-based attack protection attacks?

jwolach by L4 Transporter
  • 3126 Views
  • 3 replies
  • 0 Likes

Resolved! Scheduling policies and continuous tcp sessions

Dear Gentlemen,

Does anybody know how we can configure the policies to block a continuous TCP session when the schedule runs out?

The test we are trying to do is to block a skype discussion during a scheduled time.

During the 'allowed' time, we can laun

...

itbrain by L0 Member
  • 4206 Views
  • 3 replies
  • 0 Likes

Button for "Dynamic URL Filtering" is not there

The checkbox for "Dynamic URL Filtering" is supposed to be in the URL Filtering security profile.

I have a PA-4020 that does not show it. It's running 3.0.6.

I also have a PA-2050 which is running v3.0.5 and it does have the checkbox. Did the checkbox

...

ksalustro by L3 Networker
  • 4558 Views
  • 5 replies
  • 0 Likes

Using two different Radius at the same time?

In service route configuration one can define which interface should be used by the managementplane to reach the Radius server which you will use.

However Radius can be used both for admin-logins aswell as captive portal (user-logins).

Is it possible t

...

rps by L3 Networker
  • 4812 Views
  • 8 replies
  • 0 Likes

PAN agent to captive-portal fallback

It's possible to configure a fallback to a web form (captive portal) if a user is unkown without specifing a source ip adress in the captive portal policy? In our DHCP network we a mix of AD connected user and not AD connected. If yes how ?

Best regar

...

asecus by Not applicable
  • 2918 Views
  • 1 replies
  • 0 Likes

Threats log for denied packets

Dear all,

I currently have a generic rule which blocks netbios-like traffic to and from internet with a simple deny. As this traffic is very likely to be malware generated (at least in my context) I have enabled a simple alert-only antivirus profile o

...

x-forwarded-for and User Identificaton

We have configured x-forwarded-for flagging along with the User Identification.

Traffic logs from a tap upstream of a (squid) proxy carry the x-forwarded-for flag, but the IP is not resolved to a user.

Is this expected behaviour? (i.e. is ip-to-user tr

...

User-ID not detecting logged off users?

I have the User-ID agent configured and working nicely, however I just noticed a few entries in the URL logs showing for the domain user who last logged on to one of our PC's when I know that the PC is currently logged on using a local account rather

...

SSL Forward Decryption - Understanding Override

I'm looking at the pros and cons of enabling forward decryption.  I noticed there's an "Are you happy to continue" over-ride option but it's global i.e. it's simply on or off.

I assume this won't play nice with any non-browser based https downloads?

Al

...

Which variables are allowed in response pages?

According to Custom-Block-Pages-TN-revB.pdf the variables available are:

<user/>
<url/>
<category/>
<appname/>
<pan_form/>
<fname/>

Where <pan_form/> can only be used for captive portal and url filtering continue and override page.

But what about the others?

...

rps by L3 Networker
  • 3086 Views
  • 1 replies
  • 0 Likes

Resolved! UIA

How to download User Identification Agent ?

Can a PA replace data in a stream?

PA have support for datafiltering but is it possible to also, when a rule is triggered, to replace the data and pass it through?

Like exchanging "User-Agent:" in all http-requests (where User-Agent exists in the header) into a common User-Agent string

...

rps by L3 Networker
  • 2059 Views
  • 1 replies
  • 0 Likes
  • 24040 Posts
  • 115 Subscriptions
Top Liked Authors
Labels