General Topics

How to allow policy destination by URL

Hello,

I need know how to allow create policy in PA firewall 3020 and add destination as URL name as (microsoft office 365) instead of adding all IP ranges.

Appreciate your help

Thanks

global protect vpn with DUAL ISP

Hi Team,

we have two isp link with ecmp load-balancing enabled. we only have one virtual router setup. we have configured GP vpn portal with one isp interface and how can i configure the GP vpn with second isp link as well. we would like to have two

Global Protect Enforcement Bypass

Hi All,

I understand that this is a Microsoft related matter however I'm interested to see if anyone else has come across this issue.

With Global Protect Network Enforcement in place (through the Portal Config), it is still possible for local admins

Configuration checks against CIS security benchmarks

Hello All, Do any of you compare local firewall or Panorama configurations against CIS benchmarks for security compliance checks ?

Either using an existing tool to check Firewall compliance with the CIS (Centre for Internet Security benchmarks) recomm

User-ID Agent 8.1 help needed

Hello.

AD integration using the User-ID agent.  We were on 8.0.7-2 and things were working fine.

I tried upgrading to version 8.1.0-66 and had several problems with wrong user-id being reported.  I saw in the release notes for 8.1:

• Since multiple us

GlobalProtect issue with Enforcer Network Access

Hello,

We enabled a week ago the feature enforce network access on our environment.

We are using internal host resolution to detect if user is inside or outside corporate network.

In a random way, we're experiencing issue with users worldwide. We have

Block Psiphon App

Hi,

Is there any way to block this psiphon app? is it needed ssldecrypt?

This app uses many apps (ike,ssh,ssl) so we can not block them. How do you block this app psiphon?

Dns Sinkhole Adoption Rate fell to 77% from 100%

I'm trying to figure out wh my Dns Sinkhole Adoption Rate fell to 77% from 100% over the past six months.  Every security policy is using the same anti-spyware policy.  Any ideas?

Find disabled administrator accounts

Across a large environment, what would be the best way to audit Palo administrator accounts?  That is accounts found at Device > Administrators.

For various reasons we all end up with lots of AD accounts, service accounts and so on there, what I'd li

Ping log with 0 bytes sent

Hi Guys,

I noticed some strange logs on one of our 5200 firewalls.

There is device behind the firewall that is running constant ping to google dns, traffic is allowed and working normally.

I noticed a some logs that bytes sent is zero... I can explain

Deny PSiphon

Split Minemeld Feed

Is there a way to split a large output feed into smaller feeds.