Palo alto not blocking a URL

Hi All,

I hope all are doing well.

I am trying to block a URL on palo alto firewall using custom URL category but firewall is not blocking the traffic and its passing through allow SSL/Web-browsing rule just below it.

This is the rule i created:

Rule

GP password expiry error

Some of our users are getting password expiring msg when they are connecting via GP but when we checked their ldap accounts the password is set to never expire.PANOS version is 8.16-h2 and Global Protect Agent is 4.1.10 is there is bug.Please suggest

Site disconnect and backup issue

we get a lot of site disconnects and backup reports that are constantly in a state of being disconnected this will effect performance as the connection gets closed. please advice. thanks

TCP-RST-FROM-CLIENT

Hi,

I have allowed a FTP session. However, the FTP session does not connect. When I search the logs, the traffic is allow however the session end reason is tcp-rst-from-client.

Please advice.

Thks and Rgds

global resource counter appid_post_pkt_queued

Hello,

someone know what means this counter increasing?

appid_post_pkt_queued    4294967293 826432036 info      appid     resource  The total trailing packets queued in AIE

and this?

dfa_sw                   4415      849 info      dfa       pktproc   T

any solution to keep tracking user IP mapping?

One of my customer is requesting me to track user IP address when he move from his desk to meeting room, and vice versa.

He carries his laptop, he use same ID account on AD, but his IP address will be changed when he moves around.

I know he needs to g

Refund request for VM-Series Next-Generation Firewall Bundle 2

I have used VM-Series Next-Generation Firewall Bundle 2 (sold by Palo Alto Networks Inc.) in AWS for learning purposes. But it charged me $1,887.32 that I can't afford. In the beginning, When I use these services, the web tells me these are free serv

Computers in remote clinic need to communicate with on prem server

We have just brought some remote clinics online. We have a point-to-point between our PA5520 at the main hospital and a PA820 at our remote site. We're routing between P2P with static routing at the moment. Data/Voice is working, as the VLANs are on

traffic segmenation affect app-id

Hi

So I am working through a ssl decrypt issue with PA support. I am being told that because the stream is being segmented - so not coming as 1500mtu packets. the PA can't work out what the stream is.

The implication is that app-id doesn't work prope

Hardware Problems in PA 3220

I had similar problems in 4 firewall pa 3220 in which I could not even enter maintenance mode to take it to the factory reset mode and I had to send them via RMA to the 4 firewalls  for their change. Someone had a similar problem ,  to me a lot of at

URL 9.0 URL Category Cache Build Time?

How long does it take for the URL categories to build in the 9.0 release?   We have an issue with google-base app, where almost all google searches come back as the 'not-resolved' category for the first 5 minutes when we change datacenters.   8.1 you