Home Decryption on a PA-220.

I have a PA-220 at home and want to use it to obviously protect my home, but also to help prevent my children from accessing things I feel inappropriate. 

Obviously with encrypted traffic from things like gaming consoles and phones this is harder to

Netflow originator finding

Hi !

we have a query in Netflows. we have configured Netflows on PA820 firewall and enabled monitoring on both WAN and LAN ports. The flows are going to the Netflow collector and everything working as expected. when we are analyzing the Netflows we ar

Upgraded from v9 to v10 and SNMP traffic statistics...

Hi,
Recently we upgraded our VM-100 fw from v9 to v10 and apart from the yellow login wallpaper there was not much visual changes after the transition.  Everything is running as smoothly as before, except an issue with SNMP traffic statistics.

We extr

Not able to access an website via Palo Alto firewall

Hi Folks,

We are recently receiving multiple cases where the devices behind the PA firewall is not able to access certain websites.

In an recent case we had seen for two devices (Device A and Device B in different VLAN's ) located behind Palo Alto fi

Disable interface and kill its sessions by schedule...

Hi,

This is a boarding school situation.  By mutual agreement we close internet access to the dorms from midnight to 6AM.  Several years ago we tried to control the DormsNetZone rules by a schedule.  However as this didn't kill the active sessions it

Communication between 2 network segment

Hello,

I have a PA-220 firewall. There is a normal switch connected on ethernet 1/4. The switch is connected to the equipments of 2 network segments, 10.1.240. * and 192.168.5. * . 

These equipments need to communication now. But I can't change their I

WAF Firewall

Hi Comunity,

Does paloalto has a waf (Web app firewall) solution?

Many thanks.

Script to automate the baseline configuration after initial palo alto deployment

Hello Guys,

I have prepared the "SET" commands which configure the baseline settings. I can able to run the full set command from CLI. I would like to know any options where I can run these command from a Linux machine where the system take the comma

SSL Decryption and Forward decrypted content to WildFire Query

Hi Team,

I have below 2 tasks which needs to be closed from PaloAlto Level. Appreciate your quick response.

Task 1

"1.Configure SSL Forward Proxy for all traffic destined to the Internet"

As per the Best Practices we have to enable ssl Decrypti

Global Protect is constantly causing network errors.

Since November I have been experiencing issues with Global Protect VPN not connecting properly.  Global Protect either causes a slow down in my internet or my local internet to go out with a bunch of "DNS error" or "Network Change" error or "Network

Include or Exclude Subnetworks for User Mapping

I would like to know when to use Include or Exclude Subnetworks for User Mapping. in other words I would like to know whether it is used when we use agentless user id or external user id agent or in both cases?

Sort feature would be helpful

I'm fairly new to Palo Alto gear and wanted to submit a suggestion about adding a sort capability to the information presented in the various tabs/pages. Just a few examples on the benefits of being able to sort: Trying to find that one rule where yo