Export logs from PA7050 to Window Log Server

Hi Guys,

Any possibility we can export daily logs from PA7050 to external windows log server through SCP or FTP? Been told there is a limitation for PA7050 to do so because the log database is too large for export or import. Any possible can do it by

Emails from PA-7050 delayed

Hello, 

Has anybody experienced delayed emails from PA-7050 running on 8.1.7 code? Even after restarting the log receiver process the queue depth keeps increasing and email messages are delayed. Thank you. 

External Forwarding stats:
Type Enqueue Cou

SSL Decryption and Facebook Messenger and other message apps

Anyone have issues with FB messenger or other chat platforms when SSL decryption is on? I see the logs say its allowed and tcp-fin but it doesn't work it just spins in a wait state on the app. when i click off my wifi and on to lte then it works fine

Natting to ip address which is not binded to any interface

Hello Everyone,

I want to nat traffic going from dmz zone to wan zone. I want to nat ip (172.16.16.16&172.16.17.17-dmz zone) to use nat ip 200.0.0.1 which is not configured to any interface. I am unable to perform this. Please find below snap.

1)Interf

Log traffic on Panorama is less than firewall device

Hi everyone,

iam using the monitor > traffic on panorama and saw the period logs more smaller than the firewall device, in panorama we have log until 02/14/2020, while in firewall device the log starts on 01/31/2020, i used the command show system log

PBF rule with src zone 'any'

Does anyone if it is/should be possible to configure a PBF rule with src zone any?
The inline help says "To choose source zones (default is any), click Add and select from the drop-down." but 'any' is not an option when I actually try to create the ru

Measure CPS practically

Hi Guys,

We have PAN VM 300. To implement Zone Protection, we want to measure CPS. Now we dont have Panorama and dont do firewall monitoring with any tool.

Now the admin guide suggests that:

Panorama on ESXi resources

Hello community,

we would like to build virtual Panorama and log collectors as virtual machines on ESXi.

Does anybody know, if resources like CPU and memory must be dedicated to these machines only or can they be shared?

I cannot find it in any documen

Global Protect Linux and Strongswan

I had to test IPSec connection on Linux using strongswan as part of a support case i was working on and i collected a lot of good information on how to get this working. So i thought i would share it with you.

Tested on PANOS 7.1.2, Ubuntu 16.04, St

Palo Alto and Menlo Integration

Hi all,

Does anybody known how to integrate Palo Alto with Menlo Security Solution ?

The goal is to transparently redirect HTTP/HTTPS traffic to Menlo appliance for specific URL Categories...

Any idea ??

Regards,

HA 

Slow speed with GlobalProtect

Hi to all,

We are trying to understand why the download speed is really slow vía GP.

We stablish a VPN GP with IPsec without Split Tunneling. We acces to some public web to download a test file. Im downloading a 1G file.

If we download without GP but th...

Bandwidth limitation per policy

Hello All,

I have filled the local database with users because we do not have an Active Directory, i create a captive portal to enforce the users to do authentication. in the polices i have grouped the users depends on what they should go through net