Resolved! Allowing Ads

I have a user who would like access to be able to view ads. This may or may not be a good practice, but I would like to know if this is able to be granted. For example, we granting access to something such as Facebook, I can create a policy and grant

Resolved! Authentication - Users are not matching with groups

Hello, 

I have a problem with authentication. I have configured a PAN integrated agent. 

I can see users authenticated. At the same time, the firewall is getting the groups from AD. But for some reason, the users are not matching with the groups. So

Resolved! Meraki behind PA850 - Site-to-site, Error Unfriendly NAT configuration

Hi All, 

I am working on a implementation of the Meraki MXs behind PA850 - Site-to-site ( hub and spoke). I am getting error on the VPN status: NAT type: Unfriendly. This security appliance is behind a VPN-unfriendly NAT, which can be caused by upstr

Resolved! Palo 5220 (8.1.6h2) Throughput

All

We are pulling data from an a remote server to a SQL server, that sits behind the Palo, using SMB and FTP. The file size is 40G.

ALL links between the 2 servers are verified at 10G.

The transfer rate is being measured between 75MB and 120MB., apprx

Resolved! ZPA Minemeld feed from json source truncated to last record

Problem Summary:

Trying to locally convey - as a feed - all subnet block ranges from https://ips.zscaler.net/zpa/json - but only getting the last presented.

URL Being referenced: https://ips.zscaler.net/zpa/json

Example Content:

{"Cloud Name":"zscale

Resolved! "SMB: User Password Brute Force Attempt detected" on share that is not being accessed

Recently I accessed a SMB share on a corporate Synology device (through the PA firewall). Accessing this share is hardly ever used. Now...days later, after several reboots of the client computer, the Firewall keeps on detecting the "vulnerability" SM

Resolved! Enable Qos on sub-interface

Hi all,

Can I configure Qos on sub-interface?

Model PA-5260

Software: 8.1.11

Thanks

Resolved! Captive Portal LDAP Authentication redundancy

Hello.

I have a Captive Portal that uses next Authentication Profile:

• CP_Auth

Where:

Authentication Sequence:

• CP_Auth - Auth_Mode_1, Auth_Mode_2

Authentication Profile:

• Auth_Mode_1 - LDAP_1
• Auth_Mode_2 - LDAP_2

LDAP Server Profile:

• LDAP_1: 10.10.1.101, 10.10.

Resolved! Panorama IPsec tunnel to AWS

Need to create IPSec tunnel in Panorama hosted in Google Cloud that is managing our PAN-850 in customer datacenter to our cloud environment in AWS.  FYI-we dont have Palo Alto in AWS.