This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Logging - Best Practise?

What is considered "best practise" to get useful logfiles should the need arise to go through them?The default seems to be CSV of source and destination IP/User but, for example, how would I get the URL visited since 99% of the time that is the bit we would be looking for, or would recognize more than an IP address?I guess it could be done by us...

False Positives problem of anti-virus

Hi,I received a virus block message ( Client-IRC/IRC.mirc.0113 ) when I entering the following URL:http://pmb.update.sony.net/SPU/SPUDownloadManagerInst.exeBut this file was passed by other virus scan software (Sophos).Was It a false positive or not?

Resolved! Creating Custom Applications - Dummies Guide?

Is there a dummies guide to creating custom application please?We have a couple of "in-house" apps that always pass traffic on certain ports, always to/from a certain IP range, and I'm struggling to see how to put "something" in place that says "If this traffic is between source A and destination B and is on port XYZ it is CustomApp"?Equally we ...

Dynamic Update Failing

With in Pano and direct on 3 PAN devices - I am receiving the below error when attempting to download yesterday's threat update. I am going to try a manual upload. This is the first time this has event has occured. Are there any issues with downloading content from corporate since the release? Thank you.Failed to download. Please try again la...

MGoodnow by • L4 Transporter
  • 6024 Views
  • 5 replies
  • 2 Likes

Simply correlate theats and URL's

I'm surfing throgh differents threats (virus,spyware,etc) in the monitor windows and in some cases I find out in the other filed the URL wher it came from otherwise moslty of the time I just see the source/destination IP.My question: is possible to correlate URL and threath ? If yes how aprt from the timestamp combinated with sessionid ?Thanks B...

asecus by • Not applicable
  • 3807 Views
  • 3 replies
  • 0 Likes

Resolved! Path-Monitoring Virtual Wire

Hi everybody,PA-2050Software: 3.0.5we have configured a Cluster and want to use path monitoringover a Virtual Wire.The source IP must be an IP in the same subnet as the destination IP?We have implemented a Virtual Wire in a VLAN tagged environment.Is it possible to add an tag if we want to use path monitoring in this environment,or is it only po...

indevis by • L2 Linker
  • 5456 Views
  • 1 replies
  • 0 Likes

Resolved! SSL VPN - DHCP Relay and Deny lists

Is there a way to configure the SSL VPN to rely on DHCP relay instead of using it's own internal IP pool? I thought enabling it on the public interface might work, but I don't really like the thought of anyone in that same segment getting one of our private IP addresses.Also, is there a way to explicitly deny a user or group access to the SSL V...

jdorland by • Not applicable
  • 3481 Views
  • 1 replies
  • 0 Likes

Resolved! URL Filtering and search ahead

HiI have 2 questions about fomr palo's we've just bought.FIrstly I'm trying to upgrade the URL filtering definitions, andwhen I click upgrade, it pops up and says this will take a few minutes, but regardless of how long I leave it (up to an hour on a 30Mb internet connection) it's still not upgraded. Is there any way I can see the progress of t...

Resolved! How do I check how a URL is categorized and suggest changes or corrections?

I just started getting blocked when going to Facebook. Here is the default block page:Web Page BlockedAccess to the web page you were trying to visit has been blocked in accordance with company policy. Please contact your system administrator if you believe this is in error.User: [me]URL: www.facebook.com/Category: phishing-and-other-fraudsThis...

sj3vans by • Not applicable
  • 6218 Views
  • 5 replies
  • 0 Likes

Remote Desktop and IPSec in the DMZ.

This is something we had enabled when we were using a Symantec SGS firewall, but had to disable it when we went to the PA-2050. I haven't had much time to play with it, but I need to get it working again. Under the local Group Policy of each server, we have a Secure Terminal Services IPSec policy that requires security when attempted a connectio...

mharding by • L4 Transporter
  • 3209 Views
  • 1 replies
  • 0 Likes

How to configure Radius Authentication for SSL-VPN?

Hi everybody,PA-500Software: 3.0.5Can somebody tell me how to configure the Radius authentification forSSL-VPN!I have configured the "Authentication Profile" with a Radius Server (IP, Secret).I have added an Active Directory Group in the allow list. So, the AD agent is working!I know that the agent is not necessary.The Radius is an Windows 2008 ...

indevis by • L2 Linker
  • 5935 Views
  • 3 replies
  • 0 Likes

Resolved! isolated installation procedures

Is there a procedure listing for the setup of a isolated PA unit where the appliance will not initially have access to the Internet to download software/firmware updates?I'd like to have a process to get the unit initially installed and configured using a PA software revision that is manually installed instead of being pulled down from the Inter...

rahmant by • Not applicable
  • 3163 Views
  • 1 replies
  • 0 Likes

Resolved! Controlling ActiveX traffic

It's possible to control ActiveX traffic? Of course this is not an application, but it would improve secuity on the PAN device. The same for other embedded objects (Java Applets,etc.) and embedded scripts (javascript,Visual Basic script,etc).Any ideas about the future or wath we can already do ?Thanks Boris

asecus by • Not applicable
  • 8243 Views
  • 3 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks