General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Query on Split tunneling

Hello,

We are trying to exclude one IP from including routing in split tunneling.

VPN is working, however, I found that when going to 192.168.16.22, still through VPN rather than local LAN.

What we need to setup is ONLY this range, 192.168.0.0/16, wil

...

Resolved! Can Wildfire be integrated with Traps?

Hi;

If Wildcard declares a file to be melisious after having been downloaded by one user, then what? Can Wildfire inform End Point Protection Traps management to quarantine that particular user device?

Kindly

Wasfi

Resolved! What is applied first Wildfire profile or AV profile? Is the file AV scanned or sandboxed first?

Hi;

My understanding is that the PAN OS performs a hash of the file, then checks with Wildfire to see if this file has been seen or not. If it has not been seen, then it performs an AV scan on it to determine if it matches a known signature. If the f

...

Many to many dynamic NAT (/24 to /24)

Is there a way to make a dynamic NAT rule that translates one /24 subnet to another /24 subnet work in both directions and map last octet to last octet? There's a way to do it in Sonicwall so if your natting a subnet to another it will make .20 on th...

Resolved! What's the best user to block internal users trying to access the internet with a VPN client

Hi;

What's the best way to block internal users trying to access the internet with a VPN client. I mean I want to disallow all internal users from establishing a VPN while on the "Trusted Zone", whether it is an IP-SEC or SSL VPN.

Kindly

Wasfi

Resolved! Why Panorama commit is always not greyed out

Why Commit in Panorama is not greyed out even though there is nothing to commit

Problem with user mapping and GlobalProtect connection

Hello!

The access to GlobalProtect is done using certificates, it works alright, users are authenticated and identified by sAMAccountName.

Sometimes happens that the firewall re-maps the already identified user substituting the sAMAccountName with na

...

Resolved! recommended versions

Hi,

I'd like to know which PAN-OS is currently recommended? And this in combination with GlobalProtect?

Thanks,

wkr,

Luc

Resolved! Is there a description of the drop-reset deny action

Is there a description of the drop-reset deny action.

Kindly

Wasfi

Get security rules from Panorama that are pushed to local FW?

How can I do this? IE login to Panorama or the local FW and get a list of security polices that are pushed from Panorama in human readable format? Similar to 'show rulebase security rules' on the local FW?

Resolved! 7000 Series processing speeds

Hi All,

Hoping someone can clear up some confusion I have with the processing speed fothe 7050 firewall. The literature states that each NPC adds 20 Gbps of processing to the chassis. You can scale out your deployment and speed by adding NPC's, the

...

Acitve Passive with different Uplink IP address.

We have two firerwalls at different locations conencted to different vendors via different ISP.

I it possible to have uplink to vendor with same ISP but different IP address in active and passive setup?

Integrate a DMZ with virtual F5 to the PA FW

I would like to add a virtual F5 as a proxy to our exsiting 5220 PA FW. As I have never done a DMZ to a virtual device, I am jsut wondering there a sample scenario or configuration.

If my F5 was a physical device, I will just assign an IP address to

...

XML User ID

One of our engineer setup XML to pull the user id and ipaddr mapping, which works with no problem. The problem is he left the organisation and we are not able to determine the source from where the input is coming into the firewall. The log on the PA

...

Policy rules based on hostname or windows hostname

Hi

I can create a policy based around the username, what about linking to a hostname . windows hostname - verify in MS AD.

I have a management VM, I would like to move, but it has some policied based around location - specific network. It would be ni

...

General Topics

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free