General Topics

Resolved! Several Terminal Servers User-ID

Hi,

We are implementing User ID.

We have around 5 machines where we have Windows based user id agents installed and running smoothly.

Now we have around 150 terminal servers - including windows server editions, jumphosts etc. - where multiple users can

Resolved! security rule placement

Hi All,

I have an outbound web-browsing rule, rule criteria is source zone (trust) destination zone (untrust) , application (web-browsing, ssl), service (tcp-80, tcp-443)

If you are going to create more application specific rules, does it makes more

Resolved! DNS Proxy/Security

I was curious to know if anyone was pointing their domain controllers to the firewall for DNS security/proxy?  Mine currently use the ISP, but the clients use the firewalls as a proxy and then just rule just forward internal domains to the DC.  Seems

Resolved! Wildfire without SSL Decryption

We are looking at Wildfire for our PA firewalls however, we are not doing any SSL decryption. Going into it I figured we only be and to use it on unencrypted traffic. But looking at the Wildfire datasheet under file support it lists TLS and SSL files

Resolved! You don't have permission to access "http://www.costco.com/" on this server.

There are certain websites that I cannot visit behind the firewall, and get errors saying You don't have permission to access XYZ on this server.  In this case, I cannot visit www.costco.com

I am accessing with https/

Has anyone figured out how to re

Resolved! PAN routing IPv6 traffic to UnTrust with default route pointing elsewhere

I have a PAN on the internet with only IPv4.  I have an ASA dual stacked that I want to send IPv6 traffic from hosts connected behind the PAN to the ASA via the LAN.  All the interfaces on the PAN in the path have IPv6 configured. However, when the p

Resolved! Regarding sinkholed hosts

Hello Bros,

    We have subscribed to palo alto dns-security and the license has been applied to the device.

Rules with anti-spyware "dns-security sinkhole action enabled".

Now regarding the hosts with sinkhole action, that means these hosts trying to c