Custom Report Start and End Times Inclusive or Exclusive

I am exporting a Custom Report to a CSV and want to make sure I don't miss any data.

Scenario 1: I want to include a full day's logs in one file For October 1, 2020. Would I set the start time to midnight and the end time to 11:59 PM, or would I put

PANOS10 Security Policy Not Matching Randomly

Running a PA220 with PANOS 10.0.1 Simple NAT/Security policy in place to permit an outside application access on X port.  Traffic flows as expected, although randomly traffic goes unmatched and is dropped by the FW.  Jiggling the handle by remapping

Zscaler and Global Protect Compatability

Does anyone come across issues when we are running Zapp and Global Protect client together on MAC.

We have GlobalProtect with split tunnel mode and we are in phase of migrating to Zscaler solution. We deployed Zscaler with ZIA enabled to for set users

Minemeld High Availability

MineMeld needs to be deployed in a high availability model, so if one goes down firewall will not start blocking allowed traffic from the rule base. What is the recommendation here?

Evaluation License

Hi guys, 

How do i get or buy evaluation license here? I do not see a link that suggest where to get or what process is needed. I'm running a PA lab on EVE-NG and wanted to be able to run Panorama. Now, i know to do that, i need to get a eval license

Does Globalprotect support multicast traffic?

I have a scenario where the Radio equipment listens to multicast traffic on the network. Now that we have people working from home, we were wondering if the Radios can be placed on Globalprotect VPN and have the firewall route the multicast traffic.

Rules check by logs with expedition

Hello,

For one of our client , using PA 850 in cluster,

They have 8 zones for voip , printer , camera etc

And all the security policies are wide open.

Now we want to restrict the policy by looking at logs from each zone towars other.

Can we export lo

Microsoft IP ranges and FQDN-s in outgoing rules

Hi all,

must be someone had similar thoughts too,

we have a customer who'd like to secure outgoing traffic, by specifying not only applications, but also restrict destination FQDN-s and/or IP ranges.

Issue with Microsoft is that their FQDN-s, and moreov

Palo DHCP Server

I have been having issues with DHCP server reservations on the panOS 10.x 

I make reservations and I have found some devices i made reservations for get other IP addresses at times and botches my policies. 

Anyone else have this issue?

Using the Log Forwarding Built-In Actions to create Dynamic Address Group to Slow down Attackers.

Howdy Group

There is configuration area within the Log Fowarding Profile that is powerful to slow down the baddies.

I am not sure how many people are using it.

The premise is

1) I am using an EDL from Spamhaus to dynamically deny access to the public I