General Topics

User-Id Mapping / Ignore user list

Hello,

I am running into an issue with Global Protect users due to remoting into other machines with other credentials. I have read extensive articles about the issue and understand that the firewall can only map one user name to an IP. That appears t

APP-ID: Target app and Depends ON APPs over more then one Security Rule! YES or NOT?

Hi There,

I didn't find a real answer for the question, if its nessessary to add "Depends On" Apps in the SAME security rule or is it also possible to add this in the security rules before?

Example for specific app and all "Depends on" in have to be

Zone Protection drops traffic

We have below settings for  our untrust zone protection. We don't see a high CPS rate but we still see packets getting dropped, and has now started effecting us. Any guidance would be helpful.

PANO9.0.11/5250

Unexpect single port disconnection from PA-220

My client's PA 220 cannot reach to his gateway. However, after he has reboot his PA, the connection is back, but only for few hours long! No matter how I have add the MAC address and troubshoot the problem of the system.  I have checked both port on

XML API operational for specific zone??

How can I run XML API for a single zone.

And is there a way to do it periodically with some tool

Minemeld miner that accepts email addresses.

Hello Guys,

Am new to mine-meld and trying to add a node/miner that can collect email addresses.

I was able to find the Prototype aggregator "stdlib.aggregatorEmailAddress" but not the prototype Type=miner and indicator=email-addr.

Could someone please

LIVEcommunity account lost (or stolen?)

Hi everybody! Today I logged into my LIVEcommunity account as usual, but my profile has gone. It seems that I got a brand new account, while the original one is not accessible. This is my original profile: https://live.paloaltonetworks.com/t5/user/vi

Global Protect portal Config selection criteria combination of User group/device check/custom check?

I'm guessing others are combining these together, but is it possible to specify these together mix/match?    Specifically, We have configs without a custom check (custom checkmark box UNchecked-portal/agent/configs/config selection criteria custom ch

Adding ?v=panosurl to MineMeld EDL brought down our entire network

Just wanted to share this with the community in hopes that it may prevent one from experiencing the hardship that we did. We use MineMeld with our URL filtering rules. We appended "?v=panosurl" to the end of the  end of the URL for our General_Block_