Hi community
I was informed by our SE (@NVogel) that there is a very interesting script out there on github. This script is for everyone who wants to use the new Device Monitoring Feature on Panorama but cannot do so as this feature so far requires t
...
Hi Experts
As you know the default cache time for user-IP mapping in user-ID agent is 45 minutes. If I am not using WMI or netbios or server session monitoring then:
1- How user-IP mapping can be maintained by user-ID agent? This means user has to lo
...
I'm looking for information to see any one setup LSVPN using iBGP or other dynamic protocol such as OSPF. Here the scenario and not sure LSVPN using iBGP is right choice or not.
IPSec VPN tunnles between HQ and DR
Layer 2 extension between HQ and DR s
...
Dear all,
first of all, thanks a lot to all contributors for this great project.
Quick question: I configured my Minemeld instance in my local network and I also have SSL interception configured on my PA.
For the moment I had to exclude the IP of
...
Currently Running MineMeld Version 0.9.40 on Ubuntu 14.04. I am getting the following certificate error. I have tried updating the self-signed cert, restart, ubuntu reboot. with no change.
Good Morning,
System: PA-3020
SW Ver: 8.0.6
we are trying to implement a certificate on our Test Firewall and have encountered the an expired certificate.
We have created the certificate (self-signed); however, when I go to the Palo Alto GUI, the brows
...
Hello,
Quick question for a specific URL (cia.toh.info) This URL is classified as malware in PAN-DB but doesn't show ip in the AV release notes as a malware site so it doesn't get sinkholed when we do a DNS lookup for that url. We've noticed other
...
Hello!
Is possible to have configured Antispyware with DNS Sinkholing and External dynamic lists (URL filtering) in virtual wire envirnoment.
Is it working if I configure only one L3 port on PA and put on fake IP , all other interfaces remain on virtu
...
Dear all,
I've 2 internet lines connected to 2 different ISP: ISP-1 and ISP-2. Default route to internet is the connection to ISP-2
I just bought 1 more public IP range from ISP-1 that belong to a different subnet with my current ISP-1 public IP range.
...
Hi,
I'm wondering what effect, if any, does the default wildfire analysis profile have when you do not have the wildfire license applied to your firewall?
Thanks
While trying to track down the cause for 3 recent Internet outages we've experienced at one of our schools (which we still haven't determined the cause to yet), we've noticed that our OSPF adjacencies are flapping up and down across the district. Mu
...
We are getting this message, when opening websites sometimes. My suspect is the unknown category which was set to be blocked recently. But i don't know what is the source page of this message and it is the same message everytime, with business name o
...
Hi All
As I know to read the logs from DC, "Event Log Readers" permission is required for service account.
For WMI probing to clients, I need all below (please correct me if I am wrong)
1- Service account permission should be "Server Operators" in AD
...
I'm testing decryption on our PA-3020 and have found my Office 365 Powershell licensing script is failing to connect with the following error message:
New-PSSession : [ps.outlook.com] Connecting to remote server ps.outlook.com failed with the followi
...
Astardzhiev
on:
URL set to allow Ransomware
Astardzhiev
on:
How to show connected remote users with Panaroma
TomYoung
on:
URL Filtering - Max URL Entries
