This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! How do PA protect a attack of mac spoof?

Dear Master.I read that zone protection of docs and notice that PA can protect ip spoof attack using zone protection profile and uRPF. but I cannot find that protecting arp spoof attack.How do PA protect a arp spoofinig attack?Thank you.

ttongfly by • L3 Networker
  • 5198 Views
  • 1 replies
  • 0 Likes

Resolved! Installing Intermediate Root CA?

I'm in the process of purchasing a Wildcard SSL cert and I want to install it on the PAN for a mixture of things such as:The management interface.The URL Override SSL certificate.As a reverse proxy certificate.This is the one I'm planning on getting:http://www.alphassl.com/support/install-root-certificate.htmlHow do I install the intermediate CA...

Least priviledges for the user used in ldap server profile

hi,I'm configuring a ldap server profile. This profile will be used in an authentication profile to authenticate users form SSL VPN portal.What are the least priviledges necessaries for that profile (ldap server)? Is valid any user that can read from the directory?Thank you in advance.

Application Password Override

In the URL filtering configuration, there is an option to allow for an override such that a user can type in a password to override a blocked website and gain temporary access to the site.Is there a similar function available for applications? For example, I only want to allow a select number of users to access facebook.-) I have an outbound ap...

rahmant by • Not applicable
  • 2582 Views
  • 1 replies
  • 0 Likes

Resolved! User-ID and Windows "Run As"

Is there any way of picking up on the Palo if a User has run an application using the Windows "Run As" function?Eg. User1 could be logged onto machine 10.1.1.1, but runs an application as Administrator. In the logs, this shows up as user User1 (as the user-ID is taken from the AD security log, which ties IP to user).From what I understand of the...

Knowledge point redirection

Why is is that when viewing a discussion topic I get redirected to the goofy Pal Alto Networks Live page with the polling graphs? I go into Knowledge Point, click on any discussion topic then when I click to return to go back to where I started, I am taken to the PAN Live page. Sometimes I get sent to this PAN Live page when I click on a discus...

cnelson by • Not applicable
  • 2937 Views
  • 2 replies
  • 0 Likes

How i find maximum new session ?

Hii has some question for manage the paloalto.1. Can i select custom time in APP Scope monitor?2. How i see maximum new connection to paloalto ? (this relate for me to plan use the paloalto model)3. Can generate report to Graph (pipe, line, etc), Table or both in the report?

traffic report -> wrong byte counts ?

Hello,I recently created some scheduled custom report to list the top 25 byte-consumers for the last calender day.This works well and provides a listing with source and dest zone, source and dest address and bytes.But if I drill down, there is a massive discrepance between the amout that is displayed in the report ( e.g. 31,833,534,225 bytes )an...

rfle.rz by • L1 Bithead
  • 2646 Views
  • 1 replies
  • 0 Likes

URL update problem in 3.1.5?

I have this errors when updating my brigjtcloud url filtering dtabase :Oct 13 17:55:35 Newer update available...Oct 13 17:55:35 Best IP for database.brightcloud.com is 0.0.0.0Oct 13 17:55:35 Failed to download 'full_bcdb_3.458.bin'Oct 13 17:55:35 Error: pan_bc_download(pan_bc_url.c:1200): Failed to perform download and updateOct 13 17:55:35 Erro...

asia by • L3 Networker
  • 3212 Views
  • 1 replies
  • 0 Likes

Using URL Override with Data Filtering to block .exe's?

On our PA (running 3.1.5) is it possible to use the “override” URL filtering function, in conjunction with data filtering so that someone could browse sites in the “Software” category, but if they tried to download a file (exe/msi/zip etc.) from a site in that category it would prompt them to enter the override password?If so how robust is it wi...

ROUTE BASED VPN QRY WITH SRC NAT

I am trying to configure a ROUTE BASED VPN in TUNNEL MODE.I have a unit with 2 interfaces configured for Layer 3 operation with the following zones.L3-PRIV (ZONE) = My private internal network.L3-PUBL (ZONE) = My public outside network.I created a numbered ip TUNNEL.10 interface which is also defined in its own zone called L3-VPN10.I have 1 Virt...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks