General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

VPN-SSL filter

How can I filter traffic in VPN-SSL, to allow the client access to only given servers and protocols located on trust zone ?

Moving Panorama logs

Does anyone know if it is possible to move the Panorama logs from one volume to another?Essentially, we have a new home for the log files and I'd like to keep all of the historical information we currently have. The server is using an RDM volume in VMWare for the storing the logs. If it were a VMDK volume I would just move this, but sadly it is ...

ssl vpn client installation

HelloI have a client that has few remote users. So he need to configure them ssl vpn access to the network. In manual it is written that if you first time connect using ssl, you have to have administrator rights on your computer, to allow installing ssl vpn client software. But they do not want to give admin rights to their remote users. Is it p...

Resolved! Paloalto SSL-VPN + OTP

Does paloalto support OTP in ssl-vpn? If it does not how do we use strong authentication with it?

Trojan dropper.bxzq detected and not in Threath Database

Hi, our Palo Alto has detected the threat:Name:Trojan/Win32.dropper.bxzqID:2723653Description:This signature detected Trojan/Win32.dropper.bxzq Severity: But if I try to find this threath by name or ID in Threat Database it doesn't exist, how is it possible?At the same time the Palo Alto has detectedMAIL: User Login Brute-force AttemptID:40007D...

How can I see what is being blocked?

Hello, I am new to Palo Alto... Which report will show what is being blocked? Do I create a Custom Report for that? I am really just interested in seeing what Palo Alto is blocking at this point. We just put it into service last Friday as strickly a Threat prevention/ anti-malware device for now and would like to show the boss - whom I had to co...

Is Pan OS 3.1.4 stable?

I currently have PanOS 3.1.2. All my devices are currently in tap mode. It was recommended to upgrade to Pan OS 3.1.4 due to a bug in the 3.1.2. Does any one know what the bug is and also would like to know if 3.1.4 stable?

Resolved! PAN Support - NetFlow V9

Hello,Do PAN devices support Netflow (V9). We utilize Lancope Stealthwatch in our environment. Previously we used Netflow from a BlueCoat Packeteer to send "application" flows to Stealthwatch. We would like to use the more enhanced "application" classification the PAN has to offer to feed our Stealthwatch system. If this is possible - could ...

Best way to query export logs

Hello,Does anyone have any suggestions on how to lookup or query all the exported logs? Currently I export all four logs to a NAS, but how do I query all those csv files collectively, say looking for the activity of a user?Thanks

PAN MIBs

Hi Guys,I am working with OPManager and I need to get the MIB from the PAN-500.Is there any place where I can find them?Thanks in advance.RegardsJMB

Top Websites Visited - Any plans for this?

It still doesn't seem that there's a way in a PAN (3.1.4) to get a report that simply says "What are the top X websites visited?".All the logs/acc show is IP/reverse DNS so you don't see that someone has been to www.ebay.com you see they visited node99.rack7.floor5.greatbigserverfarm.com, which isn't much use really.Are there any plans to offer ...

Resolved! CVE Update and Filter Creation

I would like to know if there is a way to track whether or not a filter regading a specific CVE is being worked on or not, or if there is a way to request attention be applied to a specific CVE.I saw the doc (https://live.paloaltonetworks.com/docs/DOC-1248) which explains how to check what is available, but I am wondering if there is more. Unde...

SSL-VPN gateway problem on PPPoE enabled interface

Hi,I have a PAN behind the ADSL modem. ADSL modem is configured in bridge mode.I configured ethernet1/6 interface to get IP address via PPPoE with a static IP address specification.But I see the IP address of this interface as dynamic (PPPoE).When I want to configure SSL-VPN, I can't select etherne1/6 as a gateway interfaceHow can I solve this p...

Resolved! NAT or policy based routing in multiple ISP case

Hi,I have a three internet access from different ISP. So I have 3 untrust(ethernet1/1, ethernet1/2, ethernet1/3) interface and on trust(ethernet1/4) interface. All of them are in same virtual router. The default route will be on ethernet1/1 interface (0.0.0.0/0 -> default gateway of ethernet 1/1)I would like to use ethernet1/1 interface f...

NetConnect SSLVPN Client v1.2.0-402 fails on XP SP1

We activated the SSLVPN client v1.2 last week. When some users attempted to upgrade, they would receive the following error and the upgrade would fail. The end result was an installed NetConnect Installer but no NetConnect VPN Client. These users were on client v1.0.3."There is a problem with this Windows Installer package. A program run as ...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

VPN-SSL filter

Moving Panorama logs