General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Which variables are allowed in response pages?

According to Custom-Block-Pages-TN-revB.pdf the variables available are:<user/><url/><category/><appname/><pan_form/><fname/>Where <pan_form/> can only be used for captive portal and url filtering continue and override page.But what about the others?Later in the same document there is a table that claims...

Resolved! UIA

How to download User Identification Agent ?

Can a PA replace data in a stream?

PA have support for datafiltering but is it possible to also, when a rule is triggered, to replace the data and pass it through?Like exchanging "User-Agent:" in all http-requests (where User-Agent exists in the header) into a common User-Agent string, or for that matter completely remove data in a stream (lets say if you want to remove "Via:" he...

PA-4000 "add rule" limit question

What are the new "add rule" entry limits for SSL Decryption ,App Override, QOS, and Captive Portal?

Resolved! User Identification Agent with Active Directory

I know that PA Firewall uses MGT interface to connect to user Identification Agent, I know that most of the other services can be set to use any other interface with the "Service Route Configuration" commands.Is there any method to use any other interface as a source for communication with User Identification Agent? Thanks in advance

Resolved! Logging - Best Practise?

What is considered "best practise" to get useful logfiles should the need arise to go through them?The default seems to be CSV of source and destination IP/User but, for example, how would I get the URL visited since 99% of the time that is the bit we would be looking for, or would recognize more than an IP address?I guess it could be done by us...

False Positives problem of anti-virus

Hi,I received a virus block message ( Client-IRC/IRC.mirc.0113 ) when I entering the following URL:http://pmb.update.sony.net/SPU/SPUDownloadManagerInst.exeBut this file was passed by other virus scan software (Sophos).Was It a false positive or not?

Resolved! Creating Custom Applications - Dummies Guide?

Is there a dummies guide to creating custom application please?We have a couple of "in-house" apps that always pass traffic on certain ports, always to/from a certain IP range, and I'm struggling to see how to put "something" in place that says "If this traffic is between source A and destination B and is on port XYZ it is CustomApp"?Equally we ...

Dynamic Update Failing

With in Pano and direct on 3 PAN devices - I am receiving the below error when attempting to download yesterday's threat update. I am going to try a manual upload. This is the first time this has event has occured. Are there any issues with downloading content from corporate since the release? Thank you.Failed to download. Please try again la...

Simply correlate theats and URL's

I'm surfing throgh differents threats (virus,spyware,etc) in the monitor windows and in some cases I find out in the other filed the URL wher it came from otherwise moslty of the time I just see the source/destination IP.My question: is possible to correlate URL and threath ? If yes how aprt from the timestamp combinated with sessionid ?Thanks B...

Resolved! Path-Monitoring Virtual Wire

Hi everybody,PA-2050Software: 3.0.5we have configured a Cluster and want to use path monitoringover a Virtual Wire.The source IP must be an IP in the same subnet as the destination IP?We have implemented a Virtual Wire in a VLAN tagged environment.Is it possible to add an tag if we want to use path monitoring in this environment,or is it only po...

Resolved! SSL VPN - DHCP Relay and Deny lists

Is there a way to configure the SSL VPN to rely on DHCP relay instead of using it's own internal IP pool? I thought enabling it on the public interface might work, but I don't really like the thought of anyone in that same segment getting one of our private IP addresses.Also, is there a way to explicitly deny a user or group access to the SSL V...

Resolved! URL Filtering and search ahead

HiI have 2 questions about fomr palo's we've just bought.FIrstly I'm trying to upgrade the URL filtering definitions, andwhen I click upgrade, it pops up and says this will take a few minutes, but regardless of how long I leave it (up to an hour on a 30Mb internet connection) it's still not upgraded. Is there any way I can see the progress of t...

Resolved! How do I check how a URL is categorized and suggest changes or corrections?

I just started getting blocked when going to Facebook. Here is the default block page:Web Page BlockedAccess to the web page you were trying to visit has been blocked in accordance with company policy. Please contact your system administrator if you believe this is in error.User: [me]URL: www.facebook.com/Category: phishing-and-other-fraudsThis...

Resolved! User Identification with PAN-OS 3.0?

Hi,Is there any Tech Note with this issue?Regards,

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!