Amazon Instant video app being wrongly classified if URL filtering is turned on.

So ... not a big issue in the overall scheme of life - but I've been noticing that ( with current dynamic updates and running 8.1.2) that URL filtering has started to mess up the Amazon-instant-video application. If URL filtering is enabled - the app

Pan-OS Upgrade path question

I know this is a frequent question, but I've not seen one particular aspect of it. I need to upgrade from 7.0.1 to 7.1.x (the latest).  Am I correct that I would do the following:

• Download and install 7.0.19 <- this is my main question- can I go dire

GlobalProtect with MFA Dual Authentication

We have set up a GP slit tunnel we allow SSO using LDAP and Certificate based authentication this allows access to everything in the corporate network. However for applications we have specifically listed by service and destination we have created ad

UserID information

Is there a way to pull the UserID information from the Palo alto logs concerning VPN users?

GlobalProtect portal user authentication failed

For globalprotect I have a radius server profile with two servers in it.  I have noticed that all authentication goes to the first server in the list all the time.  And that works.  However, in testing, I have shut off the first server and the firewa

Hangout as ms-lync

Hello everyone,

the users in our company use Google Hangouts / Meet. We allowed google-hangouts and google-meet and all the dependent applications with Service Any.

However the connection is recognized as ms-lync!!

Anyone else facing similar issue?

Be

Configure Firewall HA through Panorama

Hi !

How we can configure the HA between Firewall through Panorama. I have added the both devices in to single device groups. So whenever i did the HA configuration parameters it's getting applied to both devices .

What are the steps need to be follo

GlobalProtect with MultiDomain AD (forest AD)

Hi All,

For the last couple of days am trying to configure the firewall for one of our customers to use AD authentication for GlobalProtect. But there is a catch, actually two:

- Customer is using MultiDomain (forest) AD, where the users are in one of

Panorama snmp trap

My idea was first to setup panorama to monitor the logs for critical and then send snmp trap.

But from what i can see from the PA mibs, there are no way for panorama to send info in the trap about the device? So all i see in the trap is the panorama i

qos rule allowed application is http-video but stats and cli also shows unknown-tcp

I have configured qos on application http-video  only and category is any.

Running OS 8.0.9

On qos stats graph it also shows application as unknown-tcp

from cli  when i run command

> show session all filter qos-class 1

it shows application as undecide

GlobalProtect concurrent Gateway conections

Hi

i have two separate PA-220 clusters  in separate sites and i can connect to each one independtelly via global protect, but i have to choose one site or the other. is there a way to setup the Global protect to connect to both sites at the same time