General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Viewing Unused Address Objects

Hello fellow engineers! I'm in the process of a firewall audit in my environment and I've got a lot of address objects configured. I'd like to trim the list down and get rid of addresses that are no longer valid (as in haven't been used in over a year). Is something like this possible? I saw this link about a Perl Script, but it doesn't seem pr...

minemeld + static domain list

Hello, is there a possibility?

Resolved! Tech Support file guide

Hi All, Does PAN offer a basic guide to troubleshooting using the tech support file e.g. which logs show what information etc?

how i can download palo alto vm image to install into vmware workstatio

how i can download palo alto vm image to install into vmware workstatio, i can not register in the customer portail, i am new

Resolved! Several Terminal Servers User-ID

Hi,We are implementing User ID.We have around 5 machines where we have Windows based user id agents installed and running smoothly.Now we have around 150 terminal servers - including windows server editions, jumphosts etc. - where multiple users can login at the same time. So: 1) Do we have to deploy TS Agent for user identification on all these...

Resolved! security rule placement

Hi All, I have an outbound web-browsing rule, rule criteria is source zone (trust) destination zone (untrust) , application (web-browsing, ssl), service (tcp-80, tcp-443) If you are going to create more application specific rules, does it makes more sense to put those rules AFTER the outbound web-browsing rule. For instance, say you're going to...

What is the difference of security policy in session setup stage and fast path stage

Hi All, Please could someone help me out in understanding this concept as I am a bit confused about this process.I mean if App ID is ingonred then how is the traffic allowed to go to fast path stage if all the rules are configured using AppID rather than ports. Thanks

Zabbix Monitoring PA-7050 via SNMP v3

Hello.I have a couple of PA-7050 firewalls that I monitor from Solarwinds Orion via snmp v3. However, when I try to monitor those same devices via Zabbix (SNMP v3), I am unable to get an SNMP response via the Zabbix application. SNMPwalk works fine from the command line on the zabbix server. TCPdumps indicate that communication may be mixing...

Resolved! DNS Proxy/Security

I was curious to know if anyone was pointing their domain controllers to the firewall for DNS security/proxy? Mine currently use the ISP, but the clients use the firewalls as a proxy and then just rule just forward internal domains to the DC. Seems like I should be doing the same on the domain controllers themselves?

CobaltStrike.Gen Command and Control Traffic(18005)

Hi Team, Just want to enquire if this particular signature marked as "Critical" severity has any False positive reporting ?Interested to know what are the strings used

Resolved! Wildfire without SSL Decryption

We are looking at Wildfire for our PA firewalls however, we are not doing any SSL decryption. Going into it I figured we only be and to use it on unencrypted traffic. But looking at the Wildfire datasheet under file support it lists TLS and SSL files. I'm confused how that would work at the firewall itself couldn't actually read it. Is it saying...

Resolved! You don't have permission to access "http://www.costco.com/" on this server.

There are certain websites that I cannot visit behind the firewall, and get errors saying You don't have permission to access XYZ on this server. In this case, I cannot visit www.costco.com I am accessing with https/ Has anyone figured out how to resolve the issue? Do you have to disable SSL decryption for these sites or something else? I do...

Resolved! PAN routing IPv6 traffic to UnTrust with default route pointing elsewhere

I have a PAN on the internet with only IPv4. I have an ASA dual stacked that I want to send IPv6 traffic from hosts connected behind the PAN to the ASA via the LAN. All the interfaces on the PAN in the path have IPv6 configured. However, when the pan receives IPv6 packets that need to route it simply sends it out the UnTrust zone vs the Trust ...

Resolved! Regarding sinkholed hosts

Hello Bros, We have subscribed to palo alto dns-security and the license has been applied to the device.Rules with anti-spyware "dns-security sinkhole action enabled".Now regarding the hosts with sinkhole action, that means these hosts trying to connect to a malicious domains.These trials blocked but is these another recommended actions to be...

PA-5250-AC Policy Rule, Service: Application-default for DNS Application

I have my PA-5250-AC with below sample rule. As per checking the traffic logs, I found out that UDP 53 is hitting rule 2 while TCP 53 is hitting rule 1. what is the possible cause? No. Source Destination Application Service 1 A B … dns … Application-default 2 A B Any Any made some research and found th...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Viewing Unused Address Objects