URL Filtering log with action allow

Hi Folks, It seems my whole life is a lie... Apparently PAN FW will generate URL log for category with action set to allow. Yep, and the funnier thing is that you don't even need URL filtering profile applied on the rule. Someone may say I am crazy or I don't understand how PAN FWs work, probably both is true...But how would you explain the fo...

How to reset Support portal passwords for other account members?

Is there a way to send a password reset link for other members in a support portal account? I have a Domain Admin/Super User account that has not logged in for a long time. When the user attempts to request a password reset themselves they get a "Password reset is not allowed in the user's current status". I can't seem to find any documentatio...

Linux NIS User-id Integration

Hi everyone, Is it possible at all to integrate a Linux NIS server to be used by User-Id? From what I understand the NIS does not even log logon logoff events. I have a feeling that I am answering my own question. Also is it possible to use Syslog to look through LTSP for events as well? We do have an openLDAP server but each linux client go...

Serial port on 4050 not showing output

I picked up a used 4050 on ebay. It booted when I got it and I missed the prompt window to type "maint" so I could wipe it. Now I get no display. I am getting pretty frustrated with this unit. Does this console access acct weird by design? Why did it work at first? Can I pop the lid and go mount the drive in a PC and delete the /ect/config direc...

Migrating PA5020 to PA5220

Hello, I am in the process of migrating an HA pair PA-5020 on version 8.1.22 to PA-5220 that shipped with version 10.1.3. From what I researched the 5020 is end of life and can only go up to OS ver to 8.1.*. My thought was to downgrade the new PA-5220 from 10.1.3 to 8.1.22 and restore the configuration. In the process of downgrading the ...

Migration from PA 220 to PA 440

I am in the process of migrating from a pa220 os 10.1 to a pa440 os 10.1.3. I imported the configuration from the pa 220 to the pa440 I ran into three issues: 1.we are getting 1gig from the ISP and even with Qos disabled we are only getting 150mbps 2. We have a toshiba phone system not IP every thing works except when calling location B across t...

Schedule Export of Configuration Files to Panorama Questions.

Hello. schedule Export of Configuration Files Is it right to extract firewall configuration that functions are linked to panorama? https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/administer-panorama/manage-panorama-and-firewall-configuration-backups/schedule-export-of-configuration-files I set it up by referring to th...

block-continue to allow

Can someone step me through how to change this block-continue to an allow? step by step

Is MACsec supported this 2019?

Commit Errors on 1st Push

Hi, I have had to replace a PA-VM as the old one died. I have licensed it & imported it into Panorama, but when I try the initial push of the cfg it errors and fails- Details:. Validation Error:. network -> interface -> tunnel -> units -> tunnel.100 -> ip -> None None is an invalid ipv4/v6 address. network -> interface...

Global Protect

Hello Friends, I need some advice for my next steps to solve the problem. My problem: I got User ID mapping with Radius, and everything works fine. But, when I create a policy for example (source IP XXXX for xxx users (VPN users) destination IP xxxx action deny, my policy not acting. And when I initiate traffic from specific source IP, I am fa...