Minemeld Ageout Policys and Withdraw

Hello,

Im having several issues and questions about what the best practices would be for surronding ageout policys.

• Is it better to add an ageout policy to the Miners, Aggregators, or Outputs?
• If I use the following Ageout policy, if a feed sends an I

VmWare ESX Firewall License

Hi community, i have a problem with licensing firewall which is on VmWare. When i tried to "deactivate vm" under licensing tab(on firewall), firewall has no longer license but on the website support.paloaltonetworks.com there is still active authcode

How to store output

Hello Team,

I have one txt file in my window machine in which there are 1000 urls example.

test.abc.com

test.ftp1.com

so if i type this cmd in putty "test.url test.abc.com" i got some output.

Please let me know is there any way to save the output of a

Cannot connect to GlobalProtect

Hi,

Just need bit of a direction on what to check for this issue. Two users can't connect to the globalprotect vpn.

One user: Windows 8.1 - can't connect (shows connecting forever) and another one: Windows 10, seems to connect and disconnect straight

proxy_arp_pvlan_feature request

Dear Palo Alto support team

As I have post my question in the community, I come to conclusion that the Palo Alto firewall does not support the feature explained in the post--https://live.paloaltonetworks.com/t5/General-Topics/proxy-arp-pvlan/m-p/30252

Recommended User-ID settings

I need some help understanding the recommended settings for Pan-OS agentless User-ID.

First, here are my current enabled settings.

Server Monitor tab:  I have "Enable Security Log" checked.   Server log monitor frequency is 20, server session read fre

Global protect-DNS

Good afternoon/morning/evening everyone, 

I have an interesting one:I have a group of offshore developers and I thought about setting up a few access routes, doing split tunneling, however the problem is that my DNS being pushed for the agent is my DN

TS Agent not working for Windows File Explorer

Hi!

We found out, that it is not possible to track the user when he starts a Windows-File-Explorer via Citrix. Source-Port is used from the System-Context and not from the User-Context.

This behaivour is confirmed by Palo Alto, and it seems to be simi

EDL list used in policy has no valid entries

Hi Community.

I have configured PA to fetch EDL of type IP addresses from EDL link "https://panwdbl.appspot.com/lists/ettor.txt" for blocking tor. 

I am able to see that the list is getting populated. But occasionally I am getting below warning while c

Where do I turn this off?

 Getting a warning every time I hit okay on an interface that I already know has management enabled is irritating. Where do I turn this pointless warning off in the settings?

Push Public IP's down via Global Protect

I have a possible need to push some of my public IP's down through my Global Protect clients.

Meaning an associate at home will hit my public IP via GlobalProtect and not from the Internet side. 

Can this be done... Or is it a bad idea in Palo Alto L