Hello - I have created an EDL in PANOS 8.0.0 using a feed from Minemeld 0.9.40, when I commit I receive the following message: EDL(vsys1/Skype-IPv4 ip) Downloaded file is not a text file. Does anyone know how to correct the error ? Thanks
We are currently running Global Protect 3.1.6 on PAN-OS 7.1.14 (we're a little behind) and I am wondering if it possible to test a newer version of GP before deploying company-wide. I am new to the company and there is some concern that has lingered from upgrades that were performed in the past regarding conflicts with existing software running...
Hello I plan to put in place a SSL decryption rule to decrypt ssl traffic (SSL forward proxy). But I don't want decrypt traffic for several categories of website such as financial (bank website). I haven't the URL filtering license. I create a first rule "Do not decrypt" where I specify "Financial-services" in the URL category but when I test an...
Hi Friends, I am using PA500 firewall and access internet using websense proxy server. There is some URL are frequently block in websense server even they are allowed in websense security server. My question is how can I confiugerd policy in firewall so some URLS are skip webproxy path and use direct internet path ?. Kindly help. Reagrds,Pradeep
We unfortunately use a smtp server with fqdn. (cannot use fqdn object for certain reasons)And we implemented a security policy with the url category in the "Service/URL Category" section of the security policy.In the security policy, the application allowed is smtp and port allowed is 25.When we test, the connection does not match this rule at a...
I have SIP ALG disabled and it's working fine for the default 5060 port, but my provider also uses port 10060 and I need to disable SIP ALG for this port as well. How can I do this?
Hi , I have blocked some Applications (like youtube, facebook etc in PAN-OS9.0.0), But employees are still able to access these applications while using VPN (Like ibvpn, purevpn).If anyone have solution please let me know, how to block that traffic,
When doing any search into eBay getting Palo Alto response page for bad MindMeld URL. This just starting happening in last week? How do I change this?
Do you use Minemeld to integrate IWF (Internet Watch Foundation) to Palo Alto and can you share the miner config? The list input from IWF json input w and will need to convert to “URL List”. The feed also requies username/passward authenticaiton.
Hi, we are trying to install Minemeld using ansible and we are having the following error TASK [minemeld : npm install] ***************************************************************************************************************************************************************************************************************fatal: [127.0.0.1]...
Hi @lmori, Is there any support for Ubuntu 16.04 or later? Or is Minemeld still only supported on 14.04? Thanks! Regards, Bo
Hello Guys, Is there a way to use GlobalProtect SSO without using the Windows sign-in option? Thanks. Best regards
Hi, We have from time to time higher SWAP memory usage on 5520 box. Not sure if this would be critical or if I can just higher the treshold values in monitoring system. On reference box the swap memory is 3%, but on this one 85%. Reference PA-5520--------------------------------------------------------------------------------Number of sessions s...
Dear Palo Alto Experts, We have set-up a Clientless VPN webpage for certain users so that they can connect to an internal website from outside the company. When they logon to the VPN portal, with their Windows Credentials (Radius authenticaton), they are shown a couple of icons for internal webpages. One webpage uses Windows authentication to l...
Hi guys, We're trying to stop users from accessing webpages featuring 'momo' content. We've set up the below custom URL category and it only blocks Google searches for momo while in incognito mode, and still allows Google image and Youtube results. Is there anything wrong with this, we may have gone OTT trying to get this to work: Using asteri...
