General Topics

Browser for Panorama

Curious which browsers people might be using for Panorama.  I find Edge becomes too slow, Chrome I have issues where all of a sudden I can't scroll to the bottom of the rule base especially if you expand the zoom greather than 100%.  With Firefox it

Application ID accurate on encrypted traffic?

Does the PA do application identification for SSL encrypted traffic without if we aren't doing SSL decryption?  For example if a user watches an encrypted youtube video, is the PA able to identify that traffic as youtube, or will it be reported as ss

Cli command to delete sub-interfaces

looking for the cli command to delete multiple subinterfaces in one go. Seems like it can be done?

User-ID Logs of PanOS 8.1 has extra comma at the field

According to the documentation of PanOS v8.1, the syslog fields in User-ID logs are as:

FUTURE_USER, Receive Time, Serial Number, Type, Threat/Content Type, FUTURE_USE, Generated Time, Virtual System, Source IP, User, Data Source Name, Event ID, Repe

Access to Palo Alto Web Management Slow

I have issue  access to Palo Alto Web management Slow ( around 20second to 30second) (Browser Firefox and Chrome).

cache usage after licence expire

Hi Community,

What happens if URL and Threat licence expire in paloalto?. From PA kb ( https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CloiCAC ) , i am able to understand that the cache will be used until it expires, but wha

GP Recommended Version

What is the current recommended version of Global Protect? I am assuming its not 5.0 since they released 4.1.10 after they released 5.0. 

Nodes keep stopping - how to start and keep them started?

Just spun up a new Minemeld server and its working however the nodes like to just stop and I am not sure how to get them to start up and stay started. Rebooting will bring everything back up and they wiull be started for about a minute then they all

Geolocation ip address blocking | Different access for different user groups

Hallo,

I am new in PA matter, coming from Fortinet / Cisco (regarding to Firewall / UTM matter)  and like to know if it is possible to have different geo location ip blocking restrictions / rules for the same service. 

e.g. Access with Global Protect

licenses for URL filtering

Folks,

Our requriement is to allow specific URL's on SSL for outbound communication. Is there a need to purchase a URL filtering license for this requirement?

Regards,

N!!!