General Topics
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics

Discussions

Join Us for a Tech Deep Dive Miniseries!

 

Stop Zero-Day Threats in Zero Time with Nebula PAN-OS 10.2.

 

Join us live for an in-depth look at the latest advancements in cybersecurity, best practices, tips and tricks, demos and
more to protect your business and defend against threats in real

...

nebula-on-demand-tech-deep-dive-miniseries-live-community-banner-2600x600.jpg
jforsythe by Community Team Member
  • 442 Views
  • 3 replies
  • 1 Likes

Virus/spware download blocked but no threat logs

Hi

 

When users are accessing internal portal then they are getting "Virus/spware  download blocked" on browser with file name (althrough they are not accessing this file) but there is no virus/spyware logs in threat monitor tab.

 

Any pointers how to fi

...

nbar

Hi,

What is the NBAR equivalents in pa- qos or how does it works in PA

 

Thanks

simsim by L4 Transporter
  • 1818 Views
  • 8 replies
  • 0 Likes

Resolved! After Factory Reset Cannot connect to management server

Hi,

after i make a Factory Reset via Maintenance Mode with this HowTo -> https://live.paloaltonetworks.com/t5/Management-Articles/How-to-SSH-into-Maintenance-Mode/ta-p/59635 i cant connect via "www" to the management.

 

My new IP is default 192.168.1.1

...

IP Wildcard in custom report?

I have a custom report, I need to exclude 40 Instances of

 

192.168.x.100 to dest port (1234 or 1235)

 

is there a short way to do this or am I faced with 40 repeating lines like this....

 

( addr.src notin 192.168.10.100 and ((port.dst neq 1234) or (port.

...

Log forward without internal logging?

Should it be possible to LOG forward without having internal logging?

 

Some stuff I need to be able to deal with on the firewall, but others I just want recorded long term.

 

Seems to be no option to do it.

what NAT and Network config

Hi,

I have a router from my carrier. This gives me an internal IP 10.0.9.3 /16 from my internal Network 10.0.0.0/16 network and the GW IP he gave me is 10.0.30.99.

Now he makes natting so i could get internet access and there i have a static official i

...

Resolved! Global protect domain based local breakout

Hi,

 

I have a question regarding Global protect and partial split tunnelling.

 

Does GP have an option to only allow specific domains via local breakout, all other traffic should be forwarded into the tunnel.

 

I'm asking this question regarding 0365, all

...

xml stream error

Hi, I'm using Soltra Edge to poll the taxii service from MineMeld.  All works well in that the service can be discovered and I can start polling.  Towards the end of the polling (or possibily at the end), the following error is generated in Soltra Ed

...

PhilipW by L0 Member
  • 956 Views
  • 0 replies
  • 0 Likes

Skype for Business not work if use SSL Decrypt

Hi,

 

Is it possible to exclude Skype for Business application from SSL Decrypt?

 

Custom No decrypt URL category is not an option because new clients with on-premises Skype instances coming constantly.

 

br

Toni

ToniE by L2 Linker
  • 3558 Views
  • 6 replies
  • 0 Likes

Mixing App-ID and Service

Am I correct in assuming that if you use App-ID you can't also use TCP sercice ports to allow aditiona other services on the same rule.

 

Thanks


Rob

Top Liked Authors