Automatic email alerts: Sinkhole and security policies

Hi Community,

This query is for PAN-OS v8.1.X

I am trying to generate an email alert when the firewall sees an (action eq sinkhole) event or when the security policy created to sinkhole an infected host is used. Email Profile(s) have already configur

Custom URL category enforcement in URL column

I'm seeing some different behavior from our firewall on 8.0 code.  I've got a few rules setup wtih both security URL profiles, and the URL category column.  I've got a few custom URL categories made that match certain traffic.  What I'm finding is t

Palo Alto IDS Deployment

Hi!

Has there any specific document for PA IDS Deployment and best practices?

Thanks in Advance..

how to route different inside subnet to different outside interfaces?

the customer have added a extra isp router which i need to route a certain subnet through it for internet , the problem the default route 0.0.0.0/0 already route interent through the old outside interface , how do i route the specific inside subnet t

Cisco ISE and Palo Alto TACACS

Few questions here. 

Why do you need user local on the PA devices?

Why do you need those users local on the ISE box rather then allowing access from AD groups via ISE?

If the users are local then password changes are not possible when a user changes th

Panorama Device Removal

I had to rebuild Panorama 7 on ESX as for some reason after a power outage the image could not be restored...

New installation completed and licensed but I cannot get the firewall 3020 to connect.

I have removed the Panorama settings from firewall an

Global protect

Hi team,

How can i extract a detailed report on the list of all Global protect users (VPN users). this report aims to get the date each user was created. this is for audit reasons and i would appreciate if any one has a solution. 

thanks

collecting palo alto firewall logs with Graylog 2.5

Dear palo alto community,

I collect the palo alto firewall logs with Graylog 2.5.

When i make an ssh connection to the fw palo alto with an incorrect password, this ssh connection does not get into the logs on Graylog interface web why ? To configure

Palo Alto Threat Events Not forwarded

Hi all,

We are unable to capture below logs in syslog, but in Firewall it appears to be forwarding it to Syslog. Logs are being forwarded, but some fields are empty.