Access from dynamic Office 365 URLs to internal ressources

Hello,Im using minemeld to get the dynamic address (URLs, IPs) from office 365. If there are IP addresses, this works without problems via the EDL. In this case the EDL replace the source object.What about addresses that have a wildcard in the URL? These EDLs cannot be selected from the source object and must be saved using the URL pattern filte...

Wildcard domain + destination question

Hi..I want to be able to allow a specific set of apps to *.github.com. To do this would I simply specify a custom URL with *.github.com and destination of ANY? That would then only allow those apps to *.github.com? I ask just because I am wary of having the destination as ANY and not clear on which takes precedence. Currently I have it lock...

Mgmt interface stop working

Hi. I have a PA-500 and after a storm, the management interface stopped work. When I connect a network cable the leds doesn't work.I made a configuration to access the Firewall and to use some services throught another interface, but the "Log Scheduled Export" doesn't have this option.How can I solv this problem?

.

PA-820 Decryption Causing Slow Internet at 5000 sessions

We have been having a issue at our corporate office where users are complaining about slow access to the internet when I have decryption enabled and sessions reach 5000. Around 3000-4000 access is completely fine. I have been monitoring this from the CLI using the command "show session all filter ssl-decrypt yes count yes". Since the 820 is spec...

unable to create a global protect VPN connection while carrier using Dual stack lite

We are receiving many reports about extremely slow and unstable GlobalProtect connections with some internet providers in Marburg .The providers don’t provide native IPv4 addresses in consumer tariffs, IPv4 packets are tunneled via carrier-grade NAT (Dual Stack lite). This causes packet fragmentation. End user are unable to connect to VPN or if ...

Remove feed entries from old (deleted) feed

I was receiving feed information from the Zeus tracker miners which was discontinued earlier this year. I removed the miners and deleted them from the aggregators, but the data is still in the feeds. How do I remove/expire the data? Attached a screen shot of one of the data entries in the feed. Thanks! Mike

IS it possible to transfer the large file from web server to client over the IPSEC tunnel ?

is it possible to transfer the large file from web server to client over the IPSEC tunnel ? We have 1.5 g circuits between two ipsec gateway and MTU/MSS by default . I am facing slowness issue

TAXII Miner Input with Certificate Auth available within the AutoFocus version of MineMeld?

Hi- I'm working with a customer to pull a TAXII feed into MineMeld/AutoFocus which requires certificate based authentication. Is this possible with the MineMeld version within AutoFocus? Regards eyunghans

Log Parsing

Hi team, i am sending the firewall logs to a kibana for log analytic purpose and i ran into a minor issue i can not find a good working grok parsing for the logs that will actually work. any chances any one here done that and can help me with it ? Bets Regards,Alex.

TAP in environments with asynchronous routing

We have a situation where we can't get all the mirrored traffic to the same interface. But as it's asynchronour souting nevironment a packet can be mirrored to one interface and the reply to the other. So we need to connect 2 PA TAP interfaces to capture whole sessions. The question is will PA match the packets into same session if we put both i...