Custom Vulnerability Signature Name in Panorama logs

Anyone using custom vulnerability signatures in Panorama?

Simple example.

Threat ID 41000

Name SSH-Auth-Brute-Force

Using existing signature 31914 with Time Attribute to block source IP if too many login attempts in specified time period.

My issue is t

Carve public Subnet without involving Vendor

Anyway to accomplish following without modifying routes at the router?

I have a subnet 1.1.1.0/24

1.1.1.1/24 PAN ETH1 Need to route 1.1.1.50 from ETH1 -> ETH3 as it sits behind ETH3. I need ETH1 to reply back to router when it says arp who has for 1.

User lockouts in STS (external authentication service)

We are experiencing a high number of user lockouts with our externally accessible STS.

The traffic is HTTPS so it is making it through our blocking policies.

We are requiring MFA through DUO but the challenge/response for the username/password is hap

ISC DHCP Server Zero-Length Client Identifier Remote Denial Of Service Vulnerability

Can a vulnerability quit showing up in the threat logs but still be there or a issues?

for instance this 

Name: ISC DHCP Server Zero-Length Client Identifier Remote Denial Of Service Vulnerability

Unique Threat ID: 35223

Upgrading from 8.0.6 to 8.1.4 Issue

I am trying to upgrade from 8.0.6 to 8.1.4.

I can upload the image via the GUI and it states it saved. I use the cli to install the software package and it fails. I have downloaded 8.1.0 and 8.1.4. Do I need to upgrade to another iteration first?

Sid

Security Policy organization best practices?

We're working on an audit of our security policies to start getting rid of some generalized rules and start making things more specific.  I figured we could do some organization at the same time.  I'm curious how others are organizing their security

Source User is empty in Monitor tab

Hello!

Sometimes the "Source User" column is empty. What should I check in the settings?

PAN version 8.0.10

Thank you!

Upgrading from PANOS 8.1.3 to 8.1.4h2

Hello,

I'm currently running 8.1.3 on a pair of 3020s. Can I upgrade from PANOS 8.1.3 to 8.1.4h2, or do I need to install 8.1.4 first?

Many thanks,

Roberto

Issue in Retrieve framed IP address attributes from authentication server

HI Guys,

I have deployed radius server for authenticating the third party Ipsec clients. 

When I connect to global protect from my mobile third party ipsec client it is getting connected via x auth support enable in global protect gateway and authent