Pushing From Panorama to Firewall, Commit Failed Ethernet 1/1 in use.

Guys sorry for the newb question but our company just up and ordered a bunch of PA stuff. 

We configure a firewall to access the Internet and connect to panorama on Ethernet 1\1. 

We import the devices settings into panorama and achieve a sync.

Now we

SSL Decryption Certificate, Which IP to use?

Quick Q:

When creating the certificate for forward proxy decryption, whcih IP should be used. I expect the internal trusted IP?

Cheers

Rob

confused with PA-220 licensing and features

im having difficulty understaing the licensing on palo alto , from the attached pictures do i have the anti-virus , vulnrability protection , anti-spyware , url filtering , file blocking , data filtering and wild fire? or does each of them need a lic

after applying security rule getting strange message

i appliied a security rule and did a security profile on it but after applying it im getting this message

BGP import and export filter regex

Hi

Would be nice if there was a reference in the online help - manual to example of regex used

and what is allowed in bgp import and export filters

any one got any links.

if I want to match 

^1234($|,.*)

so AS 1234 as the first AS and anything afterwa

Mitigating CVE-2019-0624

HI @reaper , @gwesson 

I'm seeing the subjected CVE is missing in palo alto vulnerability profile.

How can I mitigate this vulnerability. 

https://nvd.nist.gov/vuln/detail/CVE-2019-0624

Regards

Venky

Dynamic update release date

Hi Community,

Hope somebody can address my below query.

I am able to see the Release date of App&threat version 8146-5421 as 2019-04-25 UTC in both threat vault and support portal( is it actually UTC time??, i am seeing 1-day gap here !),

But my firewa

Block XLSM, AHK extensions

Hi Team

How to block the XLSM, AHK extensions in firewall?

Please help us

Regards

Mohammed Asik

Regex for multiple indicators in a single html line.

Hi,

TI source-:

http://norse.malware.com.br/cgi/submit?action=stats&s=domains

This TI gives two indicators in a single html tag as given below

<tr><td><font size=2>gashsteel.co.za</font>&nbsp;&nbsp;</td><td><font size=2>gasienica.etatry.com</font>&nbs

CSV Parser for Cybercure

Hi,

TI source-:

http://api.cybercure.ai/feed/get_ips?type=csv

This TI gives a CSV file,the image for which I have attached.

The config file that i used is as below

attributes:
confidence: 80
share_level: green
type: IPv4
delimiter: ','
fieldnames:
- indica

Minemeld - Issue on Group the IP Subnet (108.62.57.1-255) to 108.62.57.0/24

Dear Brothers,

We happen the issue on the Minemeld Output List, the Miner from blocklist_de.all

The List (from blocklist_de.all) will find most of ip address: 108.62.57.1 to 10.62.57.255, 108.62.58.1 to 108.62.58.255 etc, but the minemeld cannot