recently it was found that recently that sudden url sites are not being filitered , like www.vtunnel.com is being blocked under the Proxy Avoid and Anonymizers but https:vtunnel.bz , org etc are not blocked . how to block them .
Hi.I've got an SSL VPN setup and working fine on my PA firewalls, using LDAP plugged into my AD for authentication.I want to be able to authenticate LOCAL firewall users against this VPN configuration as well as LDAP useds.Is this possible? I tried just adding the local users into the "allow" list but they wouldn't authenticate - kept giving an ...
Hello,We had a problem when we connected PA-2050 appliance (PanOS 3.x) to Cisco 4000-series switch. There was simply about 30% packet loss in traffic and it wasn't usable. Then we just put some dummy switch between PA and Cisco and everything works fine.Now we discovered the problem disappeared when we replaced Cisco switch module hardware revis...
I configured PA to use my outside interface (192.168.128.61) for update checking (not management interface), after it I noticed strange arp behaiviour from PA:00:14:40.540937 arp who-has 67.192.236.252 tell 192.168.128.61PA tries to locate update server by making arp request to it, like it has no default gw configured. Default gw is configured o...
Hi,to add DC´s in the Palo UA I can push the "Search Button" with the "..." Box.But the result is that only 2003 DC´s are shown. The 2008 DC´s are missing here.Agnet Versiomn is 3.1.2. Someone has an idea why this happens?Thanks in advance.Stefan
We've just got a new Panorama and Palo Alto implementation done.Reviewing the reporting options I noticed that a "User Activity Report" can not be requested from the Panorama server.It can be requested from the devices themselves.My issue with running the report from the devices is that we have an active/Passive setup, so I need to run the repor...
Is anyone using WebDav through a Palo Alto?I've implemented it on an IIS server that's connected to a vwire that's in front of our L3 PA deployment (if that makes sense).I'm seeing a couple of guys with Windows 7 machines on our LAN where it all works for while, then it craps out until they restart.I can't say I have too much faith in WebDav but...
Can you plse provide me with a good document, explaining in detail, different values of fields in various logs (Traffic, Threat, URL Filtering, Data Filtering, etc)
Working with Custom reports in Panorama, there are several databases that can be chosen to create reports.We have the ones that start with 'Panorama...', such as Panorama Data Filtering Logs, panorama Threat Logs, etc and ythe ones that don't have 'Oanorama...' word, such as 'Data Filtering Logs', 'Threat Logs', etc.Can someone explain the diffe...
Hi everyone,can somebody tell me if it is possibleto make a captive portal connection from the outside(untrust -> trust) to pre-authenticate an userbefore he is getting the login page from Microsoft Exchange (OWA),but it should work with SSL?When yes, please give an config example!That's the next one, SSL with captive portal.I'm only getting ...
Im not seeing all my AD users in the PA-2020. Ive installed the agent - all connected and seems to be fine with no errors but I seem to be missing about 30 of my AD users. Its a single flat AD. Ive added all the domain controllers / the agent runs with rights to read the lgs... V3.15V3.1.1 AgentWhere do I start to look?
Hi all,has anyone experienced any issue with high amount of traffic sent to a Syslog server by PAN device, when updating from 3.0.8 to 3.1?It seems to be a bug (or a very strange beahvior) introduced in 3.1 release that cause many logs generated by sessions.We are in trouble with some customers that disabled syslog log forwarding to preserve the...
Is there any way that I can see the user/users web activity? There is an option on the Monitor tab>logs>URL Filtering.However these logs show only the blocked pages. I would like to see the whole log with blocked /allowed sites.
Hello.Is the Threat Database contains signatures:http://www.symantec.com/security_response/writeup.jsp?docid=2010-092010-4015-99
Dear all,Can a user defined in the local user database to be used on security policies?What we need to deploy is that when a user authenticates via SSL VPN (using the local user database) to be able to apply security policies based on this specific username.Regards,George Goundras
BPry
on:
Palo 3410 moving from ethernet1/1 and ethernet1/2 inside and outside interface to 10gb ethernet 1/13 and ethernet1/14
| Subject | Likes |
|---|---|
| 7 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
